QUESTION: 81

When you carve an image, recovering the image depends on which of the following skills?

Recognizing the pattern of the header content
Recovering the image from a tape backup
Recognizing the pattern of a corrupt file
Recovering the image from the tape backup

Answer(s): A

QUESTION: 82

When a file is deleted by Windows Explorer or through the MS-DOS delete command, the operating system inserts __________ in the first letter position of the filename in the FAT database.

A Capital X
A Blank Space
The Underscore Symbol
The lowercase Greek Letter Sigma (s)

Answer(s): D

Reveal Solution Next Question

QUESTION: 83

While working for a prosecutor, what do you think you should do if the evidence you found appears to be exculpatory and is not being released to the defense?

Keep the information of file for later review
Destroy the evidence
Bring the information to the attention of the prosecutor, his or her supervisor or finally to the judge
Present the evidence to the defense attorney

Answer(s): C

Reveal Solution Next Question