Explain why one should have Apple factory training before attempting an acquisition on a Mac computer.?
What will be an ideal response?
To examine a Mac computer, you need to make an image of the drive, using the same techniques described in Chapter 5. You should be aware of some exceptions, however, caused by Mac design and engineering. (In addition, removing the drive from a Mac Mini case is dif?cult, and attempting to do so without Apple factory training could damage the computer. A MacBook Air poses similar problems, as you need special Apple screwdrivers to open the case.) You need a Mac-compatible forensic boot CD/DVD to make an image, which then must be written to an external drive, such as a FireWire or USB drive. Larger Macs are constructed much like desktop PCs, making removal of the hard drive easier.
You might also like to view...
By default, two controls shown in the ________ are the current date using the Now function, and a calculated control representing the page number for this page
A) Page Footer B) Page Header C) Report Footer D) Report Header
The AutoFill feature will continue a series based on the values placed in two or more consecutive cells
Indicate whether the statement is true or false
"Destination Unreachable" is designated by which ICMP type code?
a. Type 0 b. Type 14 c. Type 3 d. Type 8
The assets of a computer system can be categorized as hardware, software, communication lines and networks, and _________.
Fill in the blank(s) with the appropriate word(s).