Multiple Choice
Match each item with a statement below:
-can be used for new files that are saved or files that expand as data is added to them
A) FTK's Internet Keyword Search
B) Data recovery
C) Free space
D) Interrogation
E) Forensic workstation
F) Norton DiskEdit
G) MS-DOS 6.22
H) Multi-evidence form
I) Self-evaluation
Correct Answer:

Verified
Correct Answer:
Verified
Q40: The basic plan for your investigation includes
Q41: After you close the case and make
Q42: To conduct your investigation and analysis, you
Q43: You can use _ to boot to
Q44: A(n) _ lists each piece of evidence
Q45: Chain of custody is also known as
Q47: What should you do to handle evidence
Q48: Employees surfing the Internet can cost companies
Q49: You cannot use both multi-evidence and single-evidence
Q50: What items are needed when gathering the