312-49v9 Exam Dumps : Computer Hacking Forensic Investigator (v9)

During the trial, an investigator observes that one of the principal witnesses is severely ill and cannot be present for the hearing. He decides to record the evidence and present it to the court. Under which rule should he present such evidence?

To check for POP3 traffic using Ethereal, what port should an investigator search by?

A forensics investigator needs to copy data from a computer to some type of removable media so he can examine the information at another location. The problem is that the data is around 42GB in size. What type of removable media could the investigator use?