EC-Council: Computer Hacking Forensic Investigator(CHFI-V10) |
||||
Module 6 : Windows Forensics |
||||
Questions available : 94 |
You are not logged in. Please Login for track your learning progress |
|||
Go to Question No. |
Question No 50
If you want to share the link of this question, please click here to "Copy Question Link" and share that generated link. Link from URL may change in future.
Comunity Comments:

Opted Answer: A
A Capital X. X indicates that the file has been marked for deletion in the file systemPradeep Thomas on 19/05/2024
The OS replaces the first letter of a deleted file name with a hex byte code: E5h. E5h is decimal 229. Alt 229 ASCII code is, greek lowercase sigma, so answer is D