Multiple Choice
Match the terms with the correct definitions?.
-?A data acquisition method used when a suspect computer can't be shut down to perform a static acquisition
A) Advanced Forensic Format (AFF)
B) Host protected area (HPA)
C) Live acquisitions
D) Logical acquisitions
E) Raw format
F) Redundant array of independent disks (RAID)
G) Sparse acquisition
H) Static acquisitions
I) Whole disk encryption
J) .pdg extension
Correct Answer:

Verified
Correct Answer:
Verified
Q7: A forensics investigator should verify that acquisition
Q8: The _ switch can be used with
Q9: How can lossless compression be tested?
Q10: Match the terms with the correct definitions?.<br>-?An
Q11: The Linux command _ can be used
Q13: _ software can sometimes be used to
Q14: Match the terms with the correct definitions?.<br>-A
Q15: What is lossless compression?
Q16: What two command line utilities are available
Q17: A RAID 3 array uses distributed data