Multiple Choice
Unlike the standard DOS/Windows environments, the UNIX environment has the capability of_________ , thereby preventing the contents of evidentiary media from being changed.
A) Encrypting all data on the media
B) Copying the contents of the media
C) Warning the examiner of an impending write
D) Mounting storage media as Read-Only
Correct Answer:

Verified
Correct Answer:
Verified
Q14: _, which is part of the standard
Q15: The Coroner's Toolkit and The Sleuth Kit
Q16: grep is a standard Linux tool that
Q17: When a file is deleted on a
Q18: A list of currently mounted drives, including
Q20: MAC times, which are found in the_
Q21: On UNIX systems, e-mails and all attachments
Q22: Why is it important to determine the
Q23: The "istat" command, found in The Coroner's
Q24: FireFox 3 stores potentially notable information in:<br>A)