1.
The following GREP expression was typed in exactly as shown. Choose the answer(s) that would result. [^a-z] Tom[^a-z]
2.
This question addresses the EnCase for Windows search process. If a target word is within a logical file, and it begins in cluster 10 and ends in cluster 15 (the word is fragmented), the search:
3.
What files are reconfigured or deleted by EnCase during the creation of an EnCase boot disk?
4.
A signature analysis has been run on a case. The result "JPEG" in the signature column means:
5.
The following GREP expression was typed in exactly as shown. Choose the answer(s) that would result. [\x00
6.
Which of the following items could contain digital evidence?
7.
What information in a FAT file system directory entry refers to the location of a file on the hard drive?
8.
The EnCase methodology dictates that ________ be created prior to acquiring evidence.
9.
EnCase can build a hash set of a selected group of files.
10.
Which of the following is commonly used to encode e-mail attachments?