click below
click below
Normal Size Small Size show me how
Forensics MT MC2
| Question | Answer |
|---|---|
| To create an exact image of an evidence disk, copying the __________ _____ to a target work disk that's identical to the evidence disk is preferable. | bit-stream image |
| When you write your final report, state what you did and what you ______. | found |
| After you close the case and make your final report, you need to meet with your department or a group of fellow investigators and _________ ___ ____. | critique the case |
| A ________ __________ ___ is where you conduct your investigations, store evidence, and do most of your work | computer forensics lab |
| Windows hard disks can now use a variety of file systems, including FAT16, FAT32, ____, and Windows File System. | NTFS |
| IACIS requires recertification every _ years to demonstrate continuing work in the field of computer forensics. | 3 |
| For labs using high-end ____ servers (such as Digital Intelligence F.R.E.D.C. or F.R.E.D.M.), you must consider methods for restoring large data sets. | RAID |
| ____ __________ involves determining how much risk is acceptable for any process or operation, such as replacing equipment. | Risk management |
| By using _________ to attract new customers or clients, you can justify future budgets for the lab's operation and staff. | marketing |
| For computer forensics, ____ ___________ is the task of collecting digital evidence from electronic media. | data acquisition |