Review Questions

1. In the EnCase Windows environment, must an examiner first create a new case before adding a device to examine?

A. Yes

B. No

2. When EnCase 7 is used to create a new case, which files are created automatically in the case folder under the folder bearing the name of the case?

A. Evidence, Export, Temp, and Index folders

B. Export, Temp, and Index folders

C. Email, Export, Tags, and Temp

D. Evidence, Email, Tags, and Temp

3. From the EnCase 7 Home screen, which of the following cannot be carried out?

A. Opening a case

B. Creating a new case

C. Opening options

D. Generating a encryption key

E. None of the above

4. When creating a new case, the Case Options dialog box prompts for which of the following?

A. Name (case name)

B.

Get EnCE EnCase Computer Forensics: The Official EnCase Certified Examiner Study Guide, 3rd Edition now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.