QUESTION: 1
A FAT directory has as a logical size of:

A. One cluster
B. 0 bytes
C. 128 bytes
D. 64 bytes

Answer(s): B
QUESTION: 2
In DOS and Windows, how many bytes are in one FAT directory entry?

A. 16
B. 8
C. 32
D. Variable
E. 64

Answer(s): C
QUESTION: 3
EnCase is able to read and examine which of the following file systems?

A. HFS
B. FAT
C. NTFS
D. EXT3

Answer(s): A, B, C, D
QUESTION: 4
The following GREP expression was typed in exactly as shown. Choose the answer(s) that
would result. [\x00-\x05]\x00\x00\x00? >?[?[@?[?[?[

A. 00 00 00 01 FF FF BA
B. FF 00 00 00 00 FF BA
C. 04 00 00 00 FF FF BA
D. 04 06 00 00 00 FF FF BA

Answer(s): C
QUESTION: 5
By default, what color does EnCase use for the contents of a logical file?

A. Red
B. Red on black