The EnCase evidence file logical filename can be changed without affecting the verification of the acquired evidence.
Answer(s): C
In the FAT file system, the size of a deleted file can be found:
Answer(s): B
A sector on a floppy disk is the same size as a sector on a NTFS formatted hard drive.
A suspect typed a file on his computer and saved it to a floppy diskette. The filename was MyNote.txt. You receive the floppy and the suspect computer. The suspect denies that the floppy disk belongs to him. You search the suspect computer and locate only the suspect? computer. The suspect denies that the floppy disk belongs to him. You search the suspect? computer and locate only the filename within a .LNK file. The .LNK file is located in the folder C:\Windows\Recent. How you would use the .LNK file to establish a connection between the file on the floppy diskette and the suspect computer? connection between the file on the floppy diskette and the suspect? computer?
Answer(s): A
Select the appropriate name for the highlighted area of the binary numbers.
Post your Comments and Discuss Guidance Software GD0-100 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the GD0-100 content, but please register or login to continue.