QUESTION: 81

When you carve an image, recovering the image depends on which of the following skills?

Recognizing the pattern of the header content
Recovering the image from a tape backup
Recognizing the pattern of a corrupt le
Recovering the image from the tape backup

Answer(s): A

QUESTION: 82

When a le is deleted by Windows Explorer or through the MS-DOS delete command, the operating system inserts _______________ in the rst letter position of the lename in the FAT database.

A Capital X
A Blank Space
The Underscore Symbol
The lowercase Greek Letter Sigma (s)

Answer(s): D

Show Answer Next Question

QUESTION: 83

While working for a prosecutor, what do you think you should do if the evidence you found appears to be exculpatory and is not being released to the defense?

Keep the information of le for later review
Destroy the evidence
Bring the information to the attention of the prosecutor, his or her supervisor or nally to the judge
Present the evidence to the defense attorney

Answer(s): C

Show Answer Next Question