How Does EnCase Verify That the Case Information (Case Number

question 9

Multiple Choice

How does EnCase verify that the case information (Case Number, Evidence Number, Investigator Name, etc) in an evidence file has not been damaged or changed, after the evidence file has been written?

• A) EnCase writes a CRC value of the case information and verifies the CRC value when the evidence is added to a case.
• B) EnCase does not verify the case information and case information can be changed by the user as it becomes necessary.
• C) The .case file writes a CRC value for the case information and verifies it when the case is opened.
• D) EnCase writes an MD5 hash value for the entire evidence file, which includes the case information, and verifies the MD5 hash when the evidence is added to a case.

---

Definitions:

Obedience

Behaving in accordance with the rules and commands of those in authority.

Halo Effect

A cognitive bias where the perception of a particular trait is influenced by the perception of former traits in a sequence of interpretations.

Reciprocal Liking

The phenomena where people tend to like others who like them in return.

Primacy Effect

The cognitive phenomenon where individuals are more likely to remember and give more weight to information that is presented first in a series.