Question $5($Mandatory$)(1$ point$)$

The change in location and possession a piece of evidence goes through is called

$($CLO $5,$ MLO $5$A$)$

a$)$ Chain of Custody

b$)$ Detailed Accounting

c$)$ Evidence Attainment

d$)$ Data Aquisition

Question $6($Mandatory$)(1$ point$)$

The Copy and Paste action leaves out which type of data?

$($CLO $5,$ MLO $4$C$)$

a$)$ The File Extension Data

b$)$ The File Header Data

c$)$ The File's Active Data

d$)$ The File System Data

Question $7($Mandatory$)(1$ point$)$

Forensically clean media is media that

$($CLO $5,$ MLO $4$C$)$

a$)$ Has been cloned on another drive

b$)$ Is free of any malicious data

c$)$ Has been overwritten entirely

d$)$ Is void of incriminating data