hen EnCase 7 is used to create a new case
In the EnCase Windows
environment, must an examiner first create a new case before adding a device to
examine?
·
Yes
When EnCase 7 is used
to create a new case, which files are created automatically in the case folder
under the folder bearing the name of the case?
·
Email, Export, Tags,
and Temp
From the EnCase 7 Home
screen, which of the following cannot be carried out?
·
Opening a case
B. Creating a new case
C. Opening options
D. Generating a encryption key
E. None of the above
When creating a new
case, the Case Options dialog box prompts for which of the following?
·
Name (case name)
B. Examiner name
C. Base case folder path
D. Primary evidence cache path
E. All of the above
What determines the
action that will result when a user double-clicks a file within EnCase?
·
The settings in the
FILETYPES.INI file
In the EnCase
environment, the term external viewers is best described as which of the
following?
·
External programs that
are associated with EnCase to open specific file types
Where is the list of external
viewers kept within EnCase?
·
The settings in the
VIEWERS.INI file
When EnCase sends a
file to an external viewer, to which folder does it send the file?
·
Temp
How is the Disk view
launched?
·
By launching it from
the Device menu
Which of the following
is true about the Gallery view?
·
Files that are
determined to be images by their file extension will be displayed.
B. Files that are determined to be images based on file signature analysis will
be displayed after the EnCase evidence processor has been run.
C. Files displayed in the Gallery view are determined by where you place the
focus in the Tree pane or where you activate the Set-Included Folders feature.
D. All of the above.
True or false? The
right-side menu is a collection of the menus and tools found on its toolbar.
·
True
True or false? The
results of conditions and filters are seen immediately in the Table pane of the
Evidence tab Entries view.
·
False
How do you access the
setting to adjust how often a backup file (.cbak) is saved?
·
Select Tools >
Options > Global.
What is the maximum
number of columns that can be sorted simultaneously in the Table view tab?
·
Six
How would a user
reverse-sort on a column in the Table view?
·
Hold down the Ctrl
key, and double-click the selected column header.
B. Right-click the selected column, select Sort, and select either Sort
Ascending or Sort Descending.
C. Both A and B.
How can you hide a
column in the Table view?
·
Place the cursor on
the selected column, and press Ctrl+H.
B. Place cursor on the selected column, open Columns menu on the toolbar, and
select Hide.
C. Place cursor on the selected column, open the right-side menu, open the
Columns submenu, and select Hide.
D. Open the right-side menu, open the Columns submenu, select Show Columns, and
uncheck the desired fields to be hidden.
E. All of the above.
What does the Gallery
view tab use to determine graphics files?
·
File extension
Will the EnCase
Gallery view display a .jpeg file if its file extension was renamed to .txt?.
·
Yes, but only if a
signature analysis is performed to correct the File Category to Picture based
on its file header information
How would a user
change the default colors and text fonts within EnCase?
·
The user can change
default colors and fonts settings by clicking the Tools tab on the menu bar,
selecting Options, and selecting the Colors tab or Fonts tab.
An EnCase user will
always know the exact location of the selected data in the evidence file by
looking at which of the following?
·
Navigation Data on
status bar
Global View
·
Is the tabbed view
interface, housing evidence, results, searches, etc.
Timeline View
·
Allows you to see when
files were created. It also allows you to see when and where files were
deleted.
Filter Pane
·
Allows you to look at
a lot of information on files in a directory or device, similar to windows
explorer.
USA 
India