EC-Council: Computer Hacking Forensic Investigator(CHFI-V10) |
||||
Module 6 : Windows Forensics |
||||
Questions available : 94 |
You are not logged in. Please Login for track your learning progress |
|||
Go to Question No. |
Question No 0
If you want to share the link of this question, please click here to "Copy Question Link" and share that generated link. Link from URL may change in future.
Comunity Comments:

Opted Answer: A
A Capital X. X indicates that the file has been marked for deletion in the file systemPradeep Thomas on 19/05/2024
The OS replaces the first letter of a deleted file name with a hex byte code: E5h. E5h is decimal 229. Alt 229 ASCII code is, greek lowercase sigma, so answer is D