The most common and time-consuming technique for preserving evidence is creating a duplicate copy of your disk-to-image file.

Chapter 5, Section 3, of the NISPOM describes the characteristics of a safe storage container.

Current distributions of Linux include two hashing algorithm utilities: md5sum and ____.

Ext4f can support disk partitions as large as ____ TB.

The ANSI-ASQ National Accreditation Board (ANAB) is a wholly owned subsidiary of the American Society of Crime Laboratory Directors (ASCLD).

The first 5 bytes (characters) for all MFT records are FILE.

The FOIA was originally enacted in the ____.

For Windows XP, 2000, and NT servers and workstations, RAID 0 or ____ is available.

____ involves sorting and searching through investigation findings to separate good data and suspicious data.

In ____, two or more disk drives become one large volume, so the computer views the disks as a single disk.