You are examining a hard drive that has Windows XP installed as the operating system. You see a file that has a date and time in the deleted column. Where does that date and time come from?
A) Directory Entry
B) Info2 file
C) Inode Table
D) Master File Table
Correct Answer:
Verified
Q96: Within EnCase, what is the purpose of
Q97: The FAT in the File Allocation Table
Q98: Which of the following items could contain
Q99: The following GREP expression was typed in
Q100: To generate an MD5 hash value for
Q102: If a hash analysis is run on
Q103: Which of the following is found in
Q104: When a file is deleted in the
Q105: If an evidence file has been added
Q106: The following keyword was typed in exactly
Unlock this Answer For Free Now!
View this answer and more for free by performing one of the following actions
Scan the QR code to install the App and get 2 free unlocks
Unlock quizzes for free by uploading documents