READ Free Dumps For ECCouncil- EC0-349
Question ID 21290 | When examining a file with a Hex Editor, what space does the file header occupy? |
Option A | the first several bytes of the file |
Option B | the last several bytes of the file |
Option C | none, file headers are contained in the FAT |
Option D | one byte at the beginning of the file |
Correct Answer | A |
Question ID 21291 | In a computer forensics investigation, what describes the route that evidence takes from the time you find it |
Option A | chain of custody |
Option B | law of probability |
Option C | rules of evidence |
Option D | policy of separation |
Correct Answer | A |