Certification for EnCE Outside North America

The first sector on a volume is called the:

Within EnCase, you highlight a range of data within a file. The length indicator displays the value 30. How many bytes have you actually selected?

How many partitions can be found in the boot partition table found at the beginning of the drive?

Changing the filename of a file will change the hash value of the file.

Searches and bookmarks are stored in the evidence file.