ECCouncil Computer Hacking Forensic Investigator 312-49 Question # 109 Topic 11 Discussion

ECCouncil Computer Hacking Forensic Investigator 312-49 Question # 109 Topic 11 Discussion

312-49 Exam Topic 11 Question 109 Discussion:
Question #: 109
Topic #: 11

While searching through a computer under investigation, you discover numerous files that appear to have had the first letter of the file name replaced by the hex code byte 5h. What does this indicate on the computer?


A.

The files have been marked as hidden


B.

The files have been marked for deletion


C.

The files are corrupt and cannot be recovered


D.

The files have been marked as read-only


Get Premium 312-49 Questions

Contribute your Thoughts:


Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.