Guidance Software Certification Exam For ENCE North America GD0-100 Question # 28 Topic 3 Discussion
GD0-100 Exam Topic 3 Question 28 Discussion:
Question #: 28
Topic #: 3
How does EnCase verify that the case information (Case Number, Evidence Number, Investigator Name, etc) in an evidence file has not been damaged or changed, after the evidence file has been written?
A.
a search of the physical disk in unallocated clusters and other unused disk areas
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit