When a file is deleted in the FAT or NTFS file systems, what happens to the data on the hard drive?
A) Nothing.
B) It is moved to a special area.
C) It is overwritten with zeroes.
D) The file header is marked with a Sigma so the file is not recognized by the operating system.
Correct Answer:
Verified
Q78: Searches and bookmarks are stored in the
Q79: The first sector on a volume is
Q80: RAM is used by the computer to:
A)
Q81: All investigators using EnCase should run tests
Q82: When handling computer evidence, an investigator should:
A)
Q84: Search terms are stored in what .ini
Q85: Within EnCase, what is the purpose of
Q86: What information should be obtained from the
Q87: A hash library would most accurately be
Q88: The end of a logical file to
Unlock this Answer For Free Now!
View this answer and more for free by performing one of the following actions
Scan the QR code to install the App and get 2 free unlocks
Unlock quizzes for free by uploading documents