Multiple Choice
A forensic image of a drive preserves which of the following?
A) Memory contents
B) File slack and unallocated space
C) System date and time
D) Screen contents
Correct Answer:
Verified
Correct Answer:
Verified
Related Questions
Q5: Although it was not designed with evidence
Q6: What are the limitations of the message
Q7: If you are investigating a homicide and,
Q8: Different types of analysis include which of
Q9: No two files can have the same
Q11: All forensic tools acquire digital evidence from
Q12: Digital investigators should remember that evidence can
Q13: When drawing up an affidavit for a
Q14: What does a digital signature tell you?
Q15: Chain of custody enables anyone to determine