This question addresses the EnCase for Windows search process. If a target word is within a logical file, and it begins in cluster 10 and ends in cluster 15 (the word is fragmented), the search:

Question

Options

• AWill not find it because the letters of the keyword are not contiguous.
• BWill not find it unless File slack is checked on the search dialog box.
• CWill find it because EnCase performs a logical search.
• DWill not find it because EnCase performs a physical search only.

• A
  12% (3)
• B
  4% (1)
• C
  80% (20)
• D
  4% (1)

No community discussion yet for this question.