The EnCase methodology dictates that ________ be created prior to acquiring evidence.
A) a text file for notes
B) a unique directory on the lab drive for case management
C) an .E01 file on the lab drive
D) All of the above
Correct Answer:
Verified
Q90: Select the appropriate name for the highlighted
Q91: EnCase marks a file as overwritten when
Q92: A standard Windows 98 boot disk is
Q93: How many partitions can be found in
Q94: The EnCase case file can be best
Q96: Within EnCase, what is the purpose of
Q97: The FAT in the File Allocation Table
Q98: Which of the following items could contain
Q99: The following GREP expression was typed in
Q100: To generate an MD5 hash value for
Unlock this Answer For Free Now!
View this answer and more for free by performing one of the following actions
Scan the QR code to install the App and get 2 free unlocks
Unlock quizzes for free by uploading documents