Guidance_Software
GD0-100 · Question #82
GD0-100 Question #82: Real Exam Question with Answer & Explanation
The correct answer is C. EnCase asks for the location of the evidence file the next time the case is opened.. See the full explanation below for the reasoning.
Question
Assume that an evidence file is added to a case, the case is saved, and the case is closed. What happens if the evidence file is moved, and the case is then opened?
Options
- AEnCase reports that the file integrity has been compromised and renders the file useless.
- BEnCase reports a different hash value for the evidence file.
- CEnCase asks for the location of the evidence file the next time the case is opened.
- DEnCase opens the case, excluding the moved evidence.
Community Discussion
No community discussion yet for this question.