Ace Your Exams with Our Notes and Mock Tests!

EC-Council: Computer Hacking Forensic Investigator(CHFI-V10)
Module 3 : Understanding Hard Disks and File Systems
Questions available : 89		You are not logged in. Please Login for track your learning progress

Q. No: 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 |
		Go to Question No.

Question No 0

---

If you want to share the link of this question, please click here to "Copy Question Link" and share that generated link. Link from URL may change in future.

 

---

Bookmark this Question		QID: 174
What does mactime, an essential part of the coroner‘s toolkit do?
A:    It traverses the file system and produces a listing of all files based on the modification, access and change timestamps
B:    It can recover deleted file space and search it for data. However, it does not allow the investigator to preview them
C:    The tools scans for i-node information, which is used by other tools in the tool kit
D:    It is too specific to the MAC OS and forms a core component of the toolkit