This question addresses the EnCase for Windows search process. If a target word is within a logical file, and it begins in cluster 10 and ends in cluster 15 (the word is fragmented), the search:

Question

Options

• AWill not find it because the letters of the keyword are not contiguous.
• BWill not find it unless File slack is checked on the search dialog box.
• CWill find it because EnCase performs a logical search.
• DWill not find it because EnCase performs a physical search only.

• A
  9% (3)
• B
  3% (1)
• C
  85% (28)
• D
  3% (1)

No community discussion yet for this question.