Cnit 420 Midterm Questions And Answers Exam Questions (75 Terms) With Verified Definitions Updated 2024

Considerations for disk copy {Ans: Size, retention, and evidence location}Police Blotter {Ans: Historical database of previous crimes}Hearsay {Ans: Secondhand or indirect evidence}Disk size for logical acquisition {Ans: Suitable for large disk data retrieval}Best acquisition method determination {Ans: Based on circumstances of the investigation}RAID 1 {Ans: Provides data recovery}RAID 0 {Ans: No redundancy, biggest disadvantage}Write-Blockers {Ans: Prevent writing data to evidence drives}Keyed Hash Set {Ans: Encrypted hashing algorithm}Raw file format advantages {Ans: Fast transfers, error tolerance, compatibility with tools}