There are some specialized tools that allow an investigator to dig out certain types of files from unallocated space by identifying the header of that file type and copying all of the information between the head and a valid end of file marker. What is the name for this technique?
a. File imaging
b. Data carving
c. File reconciliation
d. Magic number recovery
b.
You might also like to view...
How is a more extensive array of options, known as a gallery, displayed in Office 2010?
A) By clicking the contextual tab B) By clicking the More button C) By choosing the Page Layout tab and clicking the Gallery button D) By clicking the Quick Access Toolbar
Which wireless standard is faster: 802.11n or 802.11ac?
Fill in the blank(s) with the appropriate word(s).
Many times the next instruction processed depends on the result of a decision that must be made.
Answer the following statement true (T) or false (F)
Which of the following statements about Try blocks is true?
a) The Try block must be followed by at least one Catch block. b) The Try block must be followed by a Finally block. c) The Try block should contain statements that may process an exception. d) The Try block should contain statements that may throw an exception.