EC-CouncilEC-Council
312-49 · Question #199
312-49 Question #199: Real Exam Question with Answer & Explanation
Sign in or unlock 312-49 to reveal the answer and full explanation for question #199. The question stem and answer options stay visible for context.
Submitted by eva_at· Apr 18, 2026Disk Forensics
Question
What technique used by Encase makes it virtually impossible to tamper with evidence once it has been acquired?
Options
- AEvery byte of the file(s) is given an MD5 hash to match against a master file
- BEvery byte of the file(s) is verified using 32-bit CRC
- CEvery byte of the file(s) is copied to three different hard drives
- DEvery byte of the file(s) is encrypted using three different methods
Unlock 312-49 to see the answer
You've previewed enough free 312-49 questions. Unlock 312-49 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#EnCase#Data Integrity#CRC#Evidence Acquisition