1. Explain why you should always search the free space and slack space if you suspect a person has deliberately deleted files or information on a workstation that you are analyzing.
2. You have been asked by management to secure the laptop computer of an individual who was just dismissed from the company under unfavorable circumstances. Pretend that your own computer is the laptop has been secured . Make the first entry in your log book and describe how you start this incident off correctly by properly protecting and securing the evidence.
250 words each question. total 500 words.
Dead line 6 hours.