You suspect that there are a number of deleted files that can still be salvaged in the unallocated space of a drive image. During which phase of the investigation would you use a data carving utility?
a. Examination
b. Acquisition
c. Identification/Assessment
d. Analysis
e. Reporting
a.
Computer Science & Information Technology
You might also like to view...
One thing that tends to decrease goodwill is
a. Remembering my preferences for your site b. Requiring me to enter my credit card number with no spaces or hyphens c. Using neutral colors
Computer Science & Information Technology
A table with dimensions of 2 × 6 has ________ cells
Fill in the blank(s) with correct word
Computer Science & Information Technology
You can export Quick Access Toolbar settings to other users
Indicate whether the statement is true or false
Computer Science & Information Technology
Which of the following would you use to provide space for text anywhere on a slide?
What will be an ideal response?
Computer Science & Information Technology