ECCouncil Computer Hacking Forensic Investigator (CHFI-v10) 312-49v10 Question # 12 Topic 2 Discussion

ECCouncil Computer Hacking Forensic Investigator (CHFI-v10) 312-49v10 Question # 12 Topic 2 Discussion

312-49v10 Exam Topic 2 Question 12 Discussion:
Question #: 12
Topic #: 2

Consider that you are investigating a machine running an Windows OS released prior to Windows Vista. You are trying to gather information about the deleted files by examining the master database file named INFO2 located at C:\Recycler\\. You read an entry named "Dd5.exe". What does Dd5.exe mean?


A.

D drive. fifth file deleted, a .exe file


B.

D drive, fourth file restored, a .exe file


C.

D drive, fourth file deleted, a .exe file


D.

D drive, sixth file deleted, a .exe file


Get Premium 312-49v10 Questions

Contribute your Thoughts:


Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.