please answer these

thank youuu

QUESTION 9 A Forensically Sound Examination Environment means (choose all that apply): No actions will occur unless the examiner intends them to occur. The examiner controls the working environment. The laboratory location only. The mindset of the examiner. When an action has been completed, the examiner will know the expected outcome. QUESTION 10 Compressing forensic image files: O is not supported by FTK Imager. O Requires that they be encrypted. Is contrary to forensic procedures for fear of losing data. Increases acquisition time. O O Decreases acquisition time. QUESTION 11 Allocated files, deleted files, slack space and unallocated space are all available for examination using (choose all that apply): An individual file. A forensic image. A logical forensic copy. A forensic copy A logical forensic image. QUESTION 12 Defining evidence becomes more convoluted when considering: The severity of the case. The jurisdiction How much digital evidence is available. Regulations, law, and rules of evidence in any given jurisdiction. Whether the case is criminal or civil. QUESTION 13 Write blocking must be performed with (choose all that apply): O SSD devices only. USB thumb drives only. A hardware write blocker and a software write blocker simultaneously. A hardware write blocker A software write blocker. QUESTION 14 If you use a third party dataset for tool validation, you must ensure: O There is documentation on what is in the dataset. O That you do not log the results to avoid contamination. That you test both a commercial and an open source tool. That you pay a fee for the validation tool and service. That it is the DCFL control image provided by NIST. QUESTION 15 The EnCase evidence file is (choose all that apply): Commonly referred to as an 'E01'. Able to include additional metadata within the forensic image. Only used by Guidance Software tools. Unable to segment output files. Unable to use encapsulation