Question 5 (Mandatory) (1 point)
Listen
The change in location and possession a piece of evidence goes through is called
(CLO 5, MLO 5A)
a) Chain of Custody
b) Detailed Accounting
c) Evidence Attainment
d) Data Aquisition
Question 6 (Mandatory) (1 point)
Listen
The Copy and Paste action leaves out which type of data?
(CLO 5, MLO 4C)
a) The File Extension Data
b) The File Header Data
c) The File's Active Data
d) The File System Data
Question 7 (Mandatory) (1 point)
Listen
Forensically clean media is media that
(CLO 5, MLO 4C)
a) Has been cloned on another drive
b) Is free of any malicious data
c) Has been overwritten entirely
d) Is void of incriminating data