Which of the following issues is NOT one that a forensic examiner faces when dealing with Windows-based media?
A) Invasive characteristics of the Windows environment
B) The facility in the standard Windows environment for mounting a hard drive as Read-Only
C) The location, organization, and content of Windows system log files
D) Available methods for recovering data from Windows media

Question

Quizplus · Accepted Answer

The standard Windows environment does not inherently facilitate mounting a hard drive as Read-Only. This is a challenge for forensic examiners who need to ensure that the data on the drive is not altered during the examination process. Other options listed are indeed challenges faced by forensic examiners.

Which of the Following Issues Is NOT One That a Forensic