Will EnCase Allow a User to Write Data into an Acquired

question 29

Multiple Choice

Will EnCase allow a user to write data into an acquired evidence file?

• A) No.  Data cannot be added to the evidence file after the acquisition is made.
• B) Yes, but only bookmarks.
• C) Yes, but only case information.
• D) No, unless the user established a writing privilege when the evidence was acquired.
• E) Yes, but only to resize the partitions.