A. Chapter Review Answers
This section contains answers for the review questions at the end of each chapter. Notice that it does not include those for Chapter Exercises. The Chapter Exercises were designed in such a manner that each person performing the exercise is likely to get different results than another person doing the same exercise. Expecting anything other than that would be akin to expecting every forensic investigation to uncover exactly the same data. Your instructor can assist you in determining how well you did in the exercises.
Chapter 1
1. Answers should include several areas of concern. Different file formats use different cluster sizes, which in turn lead to varying potentials for the amount of slack space. Also, each file ...
Get Digital Archaeology: The Art and Science of Digital Forensics now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
