1.
What information should be obtained from the BIOS during computer forensic investigations?
2.
All investigators using EnCase should run tests on the evidence file acquisition and verification process to:
3.
Assume that an evidence file is added to a case, the case is saved, and the case is closed. What happens if the evidence file is moved, and the case is then opened?
4.
The Unicode system can address ____ characters?
5.
In DOS and Windows, how many bytes are in one FAT directory entry?
6.
The BIOS chip on an IBM clone computer is most commonly located on: