Before utilizing an analysis technique on computer evidence, the investigator should:
A) Test the technique on simulated evidence in a controlled environment to confirm that the results are consistent.
B) Be trained in the employment of the technique.
C) Neither a or b.
D) Both a and b.
Correct Answer:
Verified
Q62: A physical file size is:
A) The total
Q63: You are conducting an investigation and have
Q64: The term signature and reader as they
Q65: When can an evidence file containing a
Q66: An Enhanced Metafile would best be described
Q68: If a floppy diskette is in the
Q69: The following GREP expression was typed in
Q70: RAM is used by the computer to:
A)
Q71: A file extension and signature can be
Q72: Calls to the C : \ volume
Unlock this Answer For Free Now!
View this answer and more for free by performing one of the following actions
Scan the QR code to install the App and get 2 free unlocks
Unlock quizzes for free by uploading documents