A hard drive was imaged using EnCase. The original drive was placed into evidence. The restore feature was used to make a copy of the original hard drive. EnCase verifies the restored copy using:
A. An MD5 hash
B. A 32 bit CRC
C. Nothing. Restored volumes are not verified.
D. A running log
Answer:A
A hard drive was imaged using EnCase. The original drive was placed into evidence. The restore feature was used to make a copy of the original hard drive. EnCase verifies the restored copy using:
A. An MD5 hash B. A 32 bit CRC C. Nothing. Restored volumes are not verified. D. A running log