How Does EnCase Verify That the Case Information (Case Number

question 31

Multiple Choice

How does EnCase verify that the case information (Case Number, Evidence Number, Investigator Name, etc) in an evidence file has not been damaged or changed, after the evidence file has been written?

• A) The .case file writes a CRC value for the case information and verifies it when the case is opened.
• B) EnCase does not verify the case information and case information can be changed by the user as it becomes necessary.
• C) EnCase writes a CRC value of the case information and verifies the CRC value when the evidence is added to a case.
• D) EnCase writes an MD5 hash value for the entire evidence file, which includes the case information, and verifies the MD5 hash when the evidence is added to a case.

---

Definitions:

Socialization

The process by which individuals learn and adopt the norms, values, and behaviors required to function within a society or specific group.

Excess Burden

The cost to society created by market inefficiency, often associated with government interventions like taxes or subsidies, which distort market allocations of resources.

Tax Imposed

A financial charge or other levy placed upon an individual or legal entity by a state or the functional equivalent of a state.

Demand Equation

A mathematical expression showing the relationship between the quantity demanded of a good or service and its price, along with other factors like consumer income and the prices of related goods.