Which of the following aspects of the EnCase evidence file can be changed during a reacquire of the evidence file?
A) The investigator name
B) The acquisition notes
C) None of the above
D) The evidence number
Correct Answer:
Verified
Q78: Searches and bookmarks are stored in the
Q80: Which statement would most accurately describe a
Q81: The first sector on a hard drive
Q82: Which is the proper formula for determining
Q83: The EnCase methodology dictates that the lab
Q84: A SCSI drive is pinned as a
Q87: How many clusters can a FAT 16
Q88: Search results are found in which of
Q89: The spool files that are created during
Q90: Select the appropriate name for the highlighted
Unlock this Answer For Free Now!
View this answer and more for free by performing one of the following actions
Scan the QR code to install the App and get 2 free unlocks
Unlock quizzes for free by uploading documents