The Official EnCE:Encase Certified Examiner Study Guide Second Edition Chapter 6 Review Questions and Answers with complete solution

The Official EnCE:Encase Certified Examiner Study Guide Second Edition Chapter 6 Review Questions and Answers with complete solution In the EnCase Windows environment, must an examiner first create a new case before adding a device? - Answer ️️ -In the Windows environment, you must first create a new case before the Add Device selection appears on the toolbar. Proper file management and organization require which of the following should be created to acquiring evidence? - Answer ️️ -Any folders created for a specific case should be created beforehand, and they should be grouped together under one folder with the same unique name as the case and case file name. The EnCase methodology dictates that the lab drive used to store EnCase evidence files must have which of the following prior to acquiring an image? - Answer ️️ -A hard drive used to store evidence files should be completely wiped of any data to prevent any chance of cross contamination. When creating a new case, the Case Options dialog box prompts for which of the following? - Answer ️️ -The Case Options dialog box asks for all of the options listed when a new case is created. What determines the action that will result when a user double-clicks a file within EnCase? - Answer ️️ -The FILESTYPES.INI file stores information on files such as types, extensions, and viewers used to access. In the EnCase environment, the term external viewers is best described as which of the following? - Answer ️️ -External viewers are programs that EnCase uses to open specific file types. Where is the list of external viewers kept within EnCase? - Answer ️️ -The VIEWERS.INI file stores information on external programs that EnCase uses to open specific file types. When the copy/unerase feature is used, EnCase saves the selected file(s) to which folder? - Answer ️️ -When EnCase copies selected items or undeletes files, they are saved externally to the export folder. Can the export folder be moved once it is saved within a case? - Answer ️️ -Yes. The export folder can be moved by selecting Tools in the menu bar and selecting Options, and then