You suspect that there are a number of deleted files that can still be salvaged in the unallocated space of a drive image. During which phase of the investigation would you use a data carving utility?
a. Examination
b. Acquisition
c. Identification/Assessment
d. Analysis
e. Reporting
a. Examination
You might also like to view...
The role of the ____ part of the security process is to ensure that the selected approach represents the most effective security response, as well as the greatest cost benefit for the organization as a whole.
A. plan B. evaluate C. management D. design
Critical Thinking QuestionsCase A-1Will just purchased Adobe Illustrator for his home office. He has installed it and is ready to get started by familiarizing himself with the program. He has not used Illustrator for years and it has changed a bit since then. Will is looking for the Start menu command to open Illustrator on Windows, but he cannot find it. In which of the following folders might it be?
A. Adobe Suite CS6 B. Adobe Master Collection CS6 C. Graphic Applications D. Illustration Applications
Match the chart elements to their meanings:
I. The chart area A. contains graphical representation of values in data series II. The Plot Area B. provides descriptive group names for subdividing the data series III. The X-axis C. horizontal line that borders the plot area to provide a frame of reference for measurement IV. The Y-axis D. vertical line that borders the plot area to provide a frame of reference for measurement V. The category axis E. contains the entire chart and all of its elements
What type of volume utilizes two or more physical disks, does not offer fault tolerance, and fills each disk sequentially rather than using striping?
A. Simple volume B. Spanned volume C. Striped volume D. Mirrored volume