C840 pt2 test - Study guides, Class notes & Summaries

Generally, __________ is considered to be the use of analytical and investigative techniques to identify, collect, examine, and preserve evidence or information that is magnetically stored or encoded. - Ans computer forensics Before you can do any forensic analysis or examination, you have to do what? - Ans collect the evidence __________ is data stored as written matter, on paper or in electronic files. - Ans Documentary evidence

What is meant by basic input/output system (BIOS)? - Ans the instructions stored on a chip for booting up the computer What term is used to describe data that changes rapidly and may be lost when the machine that holds it is powered down? - Ans volatile data Two of the easiest things to extract during __________ are a list of all website uniform resource locators (URLs) and a list of all e-mail addresses on the computer. - Ans physical analysis