This is the original file structure database that Microsoft originally designed for floppy disks. It is written to the outermost track of a disk and contains information about each file stored on the drive.
Answer(s): D
Which of the following is NOT a graphics file?
Answer(s): B
_____________ is simply the application of computer investigation and analysis techniques in the interests of determining potential legal evidence.
If you discover a criminal act while investigating a corporate policy abuse, it becomes a public sector investigation and should be referred to law enforcement?
Answer(s): A
Volatile memory is one of the leading problems for forensics. Worms such as Code Red are memory resident and do write themselves to the hard drive, if you turn the system off they disappear. In a lab environment, which of the following options would you suggest as the most appropriate to overcome the problem of capturing volatile memory?
Post your Comments and Discuss EC-Council EC0-349 exam prep with other Community members: