August 2013
Intermediate to advanced
600 pages
16h 8m
English
This section contains answers for the review questions at the end of each chapter. Notice that it does not include those for Chapter Exercises. The Chapter Exercises were designed in such a manner that each person performing the exercise is likely to get different results than another person doing the same exercise. Expecting anything other than that would be akin to expecting every forensic investigation to uncover exactly the same data. Your instructor can assist you in determining how well you did in the exercises.
1. Answers should include several areas of concern. Different file formats use different cluster sizes, which in turn lead to varying potentials for the amount of slack space. Also, each file ...