Question

what type of data might be recovered when examining internet activities on a suspect computer? (choose all that apply.) a. disk quota to help determine potentially hidden files by a suspect b. occurrences of when applications had been previously run by a suspect c. bookmark information showing a suspects preferences in specific areas relating to a crime or complaint d. web history activities by a suspect that might show what research they had done to prepare for a crime

Explanation:

• Option a: Disk quota tracks storage limits, not internet activity data.
• Option b: Application run logs relate to local app use, not internet activity.
• Option c: Bookmarks are saved internet links tied to user preferences, recoverable from internet activity scans.
• Option d: Web history directly records a user's internet browsing activities, recoverable during examination.

Answer:

c. Bookmark information showing a suspect's preferences in specific areas relating to a crime or complaint
d. Web history activities by a suspect that might show what research they had done to prepare for a crime