CHFI V10 Quiz Questions and Answers
Answer :
- Refer the reporter to the attorney that retained you
Answer :
- A Large volume of data can exist within the swap file of which the computer user has no knowledge
Answer :
- It traverses the file system and produces a listing of all files based on the modification, access and change timestamps
Answer :
- Add up the total size of all known partitions and compare it to the total size of the hard drive
Answer :
- the attorney-work-product rule
Answer :
- National Software Reference Library
Answer :
- Inform the owner that conducting an investigation without a policy is a violation of the employee's expectation of privacy