Unlike the standard DOS/Windows environments, the UNIX environment has the capability of_________ , thereby preventing the contents of evidentiary media from being changed.
A) Encrypting all data on the media
B) Copying the contents of the media
C) Warning the examiner of an impending write
D) Mounting storage media as Read-Only
Correct Answer:
Verified
Q2: The file system mount table shows local
Q3: FireFox 3 stores potentially notable information in:
A)
Q4: One of the difficulties in examining UNIX
Q5: When a file is deleted on a
Q6: Why is it important to determine the
Q8: The UNIX convention of "piping" the results
Q9: The inode table can be found in
Q10: Most data-carving tools operate on the assumption
Q11: MAC times, which are found in the_
Q12: What is the most efficient method for
Unlock this Answer For Free Now!
View this answer and more for free by performing one of the following actions
Scan the QR code to install the App and get 2 free unlocks
Unlock quizzes for free by uploading documents