Ace Your Exams with Our Notes and Mock Tests!

EC-Council: Computer Hacking Forensic Investigator(CHFI-V10)
Module 6 : Windows Forensics
Questions available : 94		You are not logged in. Please Login for track your learning progress

Q. No: 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 |
		Go to Question No.

Question No 0

---

If you want to share the link of this question, please click here to "Copy Question Link" and share that generated link. Link from URL may change in future.

 

---

Bookmark this Question		QID: 932
File deletion is a way of removing a file from a computers file system. The below are the series of events which occur when a file is deleted in windows. Identify which of the following event does not occur when the file is deleted:
A:    The first letter of a file name is replaced by a hex byte code E5h
B:    Clusters in FAT are marked as used
C:    Index field in MFT is marked with a special code in NTFS
D:    The operating system marks the file’s name in the MFT with a special character that indicates that the file has been deleted