What are the considerations you should have when deciding what data-acquisition method to use on your investigation?
What will be an ideal response?
ANSWER: To determine which acquisition method to use for an investigation, consider the size of the source (suspect) disk, whether you can retain the source disk as evidence or must return it to the owner, how much time you have to perform the acquisition, and where the evidence is located.
You might also like to view...
Which of the following is used to verify data integrity?
A. SHA B. 3DES C. AES D. RSA
When designing webpages, you should work in ____ colors.
A. RGB B. grayscale C. CMYK D. 3D-safe
Explain what Photoshop Help is and how it is accessed.
What will be an ideal response?
_________ audit trails may be used to detect security violations within an application or to detect flaws in the application’s interaction with the system.
A. Application-level B. System-level C. User-level D. None of the above