The EnCase evidence file is best described as:

Question

Options

• AA clone of the source hard drive.
• BA sector-by-sector copy of the source hard drive written to the corresponding sectors of the target
• CA bit stream image of the source hard drive written to the corresponding sectors of the target hard
• DA bit stream image of the source hard drive written to a file, or several file segments.

• A
  9% (3)
• B
  3% (1)
• C
  6% (2)
• D
  81% (26)

No community discussion yet for this question.