Guidance_Software
GD0-110 · Question #113
For an EnCase evidence file acquired with a hash value to pass verification, which of the following must be true?
The correct answer is A. The CRC values and the MD5 hash value both must verify. See the full explanation below for the reasoning.
Question
For an EnCase evidence file acquired with a hash value to pass verification, which of the following must be true?
Options
- AThe CRC values and the MD5 hash value both must verify.
- BThe MD5 hash value must verify.
- CEither the CRC or MD5 hash values must verify.
- DThe CRC values must verify.
How the community answered
(48 responses)- A81% (39)
- B2% (1)
- C10% (5)
- D6% (3)
Community Discussion
No community discussion yet for this question.