Assume That an Evidence File Is Added to a Case

question 79

Multiple Choice

Assume that an evidence file is added to a case, the case is saved, and the case is closed. What happens if the evidence file is moved, and the case is then opened?

• A) EnCase reports that the file integrity has been compromised and renders the file useless.
• B) EnCase asks for the location of the evidence file the next time the case is opened.
• C) EnCase reports a different hash value for the evidence file.
• D) EnCase opens the case, excluding the moved evidence.

---

Definitions:

Short-Term Memory

A limited capacity store that can maintain unrehearsed information for about 20 to 30 seconds.

Google Effect

The tendency to forget information that can be easily found using internet search engines like Google, affecting how memory is managed.

Rely

To depend on or trust in someone or something for support, help, or maintenance.

Episodic Memories

Memories of specific events or episodes in one's life, including the contextual details and emotions associated with them.