Skillset can help you prepare! Sign up for your free Skillset account and take the first steps towards your certification.
A forensic investigator would never know whether a boot disk was encrypted with Truecrypt for anti-forensics.
True
False
Truecrypt leaves a "Truecrypt bootloader" string in its bootloader that can help the forensic investigator recognize the presence of a Truecrypt encrypted disk. This means that the forensic investigator will only know that Truecrypt was used but not WHY it was used. It can be used for legitimate privacy concerns such as protecting Proprietary Data. Its use is not just anti-forensics. EDIT: Changed the correct answer to False, as stated in the explanation
Train with Skillset and pass your certification exam. Faster. Guaranteed.
Study thousands of practice questions that organized by skills and ranked by difficulty.
Create a tailored training plan based on the knowledge you already possess.
Know when you’re ready for the high-stakes exam. Have the confidence that you will pass on your first attempt.