What format is used by files that store music or images?

Why should the imaging of drives always be initiated by booting the suspect drive from a previously verified forensic floppy?

a. New floppy drives bear the danger of being virus carriers. b. A previously verified forensic floppy can detect anomalies in the drive faster. c. Some users will configure their system to erase/modify data if third-party access is determined. d. The verified forensic floppy can disable the write-blocking program found on most original media.

The READ (LFN) RECORD

a. Copies the record into the computer memory. b. Copies the record into a buffer. c. Transfers the record in the computer memory. d. Transfers the record into a buffer. e. a and b. f. c and d.