312-49v10 Exam Question 36
Which of the following tool enables data acquisition and duplication?
312-49v10 Exam Question 37
How often must a company keep log files for them to be admissible in a court of law?
312-49v10 Exam Question 38
In a Fllesystem Hierarchy Standard (FHS), which of the following directories contains the binary files required for working?
312-49v10 Exam Question 39
Steve, a forensic investigator, was asked to investigate an email incident in his organization. The organization has Microsoft Exchange Server deployed for email communications. Which among the following files will Steve check to analyze message headers, message text, and standard attachments?
312-49v10 Exam Question 40
Fred, a cybercrime Investigator for the FBI, finished storing a solid-state drive In a static resistant bag and filled out the chain of custody form. Two days later. John grabbed the solid-state drive and created a clone of It (with write blockers enabled) In order to Investigate the drive. He did not document the chain of custody though. When John was finished, he put the solid-state drive back in the static resistant and placed it back in the evidence locker. A day later, the court trial began and upon presenting the evidence and the supporting documents, the chief Justice outright rejected them. Which of the following statements strongly support the reason for rejecting the evidence?
