Creating an image of a hard drive that was seized as evidence:
A) Should be done by the user, as they are most familiar with the hard drive.
B) May only be done by trained personnel because the process has the potential to alter the original evidence.
C) May be done by anyone because it is a relatively simple procedure.
D) May only be done by computer scientists.
Correct Answer:
Verified
Q68: If a floppy diskette is in the
Q69: The following GREP expression was typed in
Q70: RAM is used by the computer to:
A)
Q71: A file extension and signature can be
Q72: Calls to the C : \ volume
Q74: In Windows 98 and ME, Internet based
Q75: A hash set would most accurately be
Q76: How does EnCase verify that the case
Q77: The following GREP expression was typed in
Q78: The acronym ASCII stands for:
A) American Standard
Unlock this Answer For Free Now!
View this answer and more for free by performing one of the following actions
Scan the QR code to install the App and get 2 free unlocks
Unlock quizzes for free by uploading documents