×
Detail Form
We will send your result on your email id and phone no. please fill detail
1.
A FAT directory has as a logical size of:
2.
In DOS and Windows, how many bytes are in one FAT directory entry?
3.
EnCase is able to read and examine which of the following file systems?
4.
The following GREP expression was typed in exactly as shown. Choose the answer(s) that would result. [\x00-\x05]\x00\x00\x00[\x00-\x05]\x00\x00\x00
5.
By default, what color does EnCase use for the contents of a logical file?
6.
4 bits allows what number of possibilities?
7.
A hard drive has been formatted as NTFS and Windows XP was installed. The user used fdisk to remove all partitions from that drive. Nothing else was done. You have imaged the drive and have opened the evidence file with EnCase. What would be the best way to examine this hard drive?
8.
For an EnCase evidence file acquired with a hash value to pass verification, which of the following must be true?
9.
Which of the following selections would be used to keep track of a fragmented file in the FAT file system?
10.
Within EnCase for Windows, the search process is: