1.
Bookmarks are stored in which of the following files?
2.
You are at an incident scene and determine that a computer contains evidence as described in the search warrant. When you seize the computer, you should:
3.
In Windows 98 and ME, Internet based e-mail, such as Hotmail, will most likely be recovered in the _____________________ folder.
4.
When a file is deleted in the FAT file system, what happens to the filename?
5.
The signature table data is found in which of the following files?
6.
Creating an image of a hard drive that was seized as evidence:
7.
4 bits allows what number of possibilities?
8.
If an evidence file has been added to a case and completely verified, what happens if the data area within the evidence file is later changed?
9.
The EnCase evidence file is best described as:
10.
An EnCase evidence file of a hard drive ________ be restored to another hard drive of equal or greater size.