QUESTION NO: 1
Within EnCase, you highlight a range of data within a file. The length indicator displays the value 30. How many bytes have you actually selected?
Within EnCase, you highlight a range of data within a file. The length indicator displays the value 30. How many bytes have you actually selected?
Correct Answer: A
Vote an answer
QUESTION NO: 2
Which of the following is found in the FileSignatures.ini configuration file
Which of the following is found in the FileSignatures.ini configuration file
Correct Answer: A
Vote an answer
QUESTION NO: 3
The Windows 98 Start Menu has a selection called documents which displays a list of recently used files. Which of the following The Windows 98 Start Menu has a selection called documents which displays a list of recently used files. Which of the following folders contain those files?
The Windows 98 Start Menu has a selection called documents which displays a list of recently used files. Which of the following The Windows 98 Start Menu has a selection called documents which displays a list of recently used files. Which of the following folders contain those files?
Correct Answer: D
Vote an answer
QUESTION NO: 4
You are at an incident scene and determine that a computer contains evidence as described in the search warrant. When you seize the computer, you should
You are at an incident scene and determine that a computer contains evidence as described in the search warrant. When you seize the computer, you should
Correct Answer: A,B,D
Vote an answer
QUESTION NO: 5
You are examining a hard drive that has Windows XP installed as the operating system.
You see a file that has a date and time in the deleted column.
Where does that date and time come from?
You are examining a hard drive that has Windows XP installed as the operating system.
You see a file that has a date and time in the deleted column.
Where does that date and time come from?
Correct Answer: C
Vote an answer
QUESTION NO: 6
Which is the proper formula for determining the size in bytes of a hard drive that uses cylinders (C), heads (H), and sectors (S) geometry?
Which is the proper formula for determining the size in bytes of a hard drive that uses cylinders (C), heads (H), and sectors (S) geometry?
Correct Answer: D
Vote an answer
QUESTION NO: 8
Select the appropriate name for the highlighted area of the binary numbers.
Select the appropriate name for the highlighted area of the binary numbers.
Correct Answer: E
Vote an answer
QUESTION NO: 9
By default, what color does EnCase use for the contents of a logical file
By default, what color does EnCase use for the contents of a logical file
Correct Answer: B
Vote an answer
QUESTION NO: 10
CORRECT TEXT
A restored floppy diskette will have the same hash value as the original diskette.
CORRECT TEXT
A restored floppy diskette will have the same hash value as the original diskette.
Correct Answer: B
Vote an answer
QUESTION NO: 11
Bookmarks are stored in which of the following files?
Bookmarks are stored in which of the following files?
Correct Answer: C
Vote an answer
QUESTION NO: 12
Within EnCase, what is purpose of the default export folder?
Within EnCase, what is purpose of the default export folder?
Correct Answer: D
Vote an answer
QUESTION NO: 13
Select the appropriate name for the highlighted area of the binary numbers.
Select the appropriate name for the highlighted area of the binary numbers.
Correct Answer: A
Vote an answer