Assume that an evidence file is added to a case, the case is saved, and the case is closed. What happens if the evidence file is moved, and the case is then opened?
A) EnCase reports that the file integrity has been compromised and renders the file useless.
B) EnCase asks for the location of the evidence file the next time the case is opened.
C) EnCase reports a different hash value for the evidence file.
D) EnCase opens the case, excluding the moved evidence.
Correct Answer:
Verified
Q26: A sector on a floppy disk is
Q108: Search terms are stored in what .ini
Q109: The following keyword was typed in exactly
Q110: An EnCase evidence file of a hard
Q111: When a document is printed using EMF
Q112: Using good forensic practices, when seizing a
Q114: To undelete a file in the FAT
Q115: RAM is tested during which phase of
Q117: How are the results of a signature
Q118: You are an investigator and have encountered
Unlock this Answer For Free Now!
View this answer and more for free by performing one of the following actions
Scan the QR code to install the App and get 2 free unlocks
Unlock quizzes for free by uploading documents