What are the advantages and disadvantages of using raw data acquisition format?
What will be an ideal response?
ANSWER: The advantages of the raw format are fast data transfers and the capability to ignore minor data read errors on the source drive. In addition, most forensics tools can read the raw format, making it a universal acquisition format for most tools. One disadvantage of the raw format is that it requires as much storage space as the original disk or data set. Another disadvantage is that some raw format tools, typically freeware versions, might not collect marginal (bad) sectors on the source drive, meaning they have a low threshold of retry reads on weak media spots on a drive. Many commercial tools have a much higher threshold of retry reads to ensure that all data is collected.
You might also like to view...
Contestants on the television quiz show Who Wants to be a Millionaire can win $1 million if they answer 15 questions correctly. Each question is multiple choice with four possible answers. What are the odds of winning the million by guessing the answers to all 15 questions?
The producers of the show want to make it more likely to succeed. They make the first five questions much easier than the later questions. Also, each contestant has three lifelines that can often help the contestant to answer correctly. Suppose the contestant gets the first five questions correct and of the remaining ten questions, three are answered correctly using lifelines. Of the remaining questions, the contestant knows the answer to three and for each of the others can identify two of the possible answers as being incorrect. What are the odds of winning the million dollars by guessing these two-part questions?
When an online video is inserted in a document, the URL and thumbnail appear; this is known as a(n) ________
Fill in the blank(s) with correct word
@occurrences is an example of a(n) ____ variable.
A. local B. global C. instance D. class
_____________________ provides a trend analysis of your computer's system stability over time
a. Event Viewer b. Reliability Monitor c. Resource Monitor d. Performance Monitor