Guidance_Software

GD0-110 · Question #128

Will EnCase allow a user to write data into an acquired evidence file?

The correct answer is E. No. Data cannot be added to the evidence file after the acquisition is made. See the full explanation below for the reasoning.

Question

Will EnCase allow a user to write data into an acquired evidence file?

Options

AYes, but only case information.
BYes, but only bookmarks.
CYes, but only to resize the partitions.
DNo, unless the user established a writing privilege when the evidence was acquired.
ENo. Data cannot be added to the evidence file after the acquisition is made.

How the community answered

(21 responses)

A
14% (3)
B
5% (1)
C
5% (1)
E
76% (16)

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion

Full GD0-110 Practice