ECCouncil Computer Hacking Forensic Investigator (CHFI-v10) 312-49v10 Question # 72 Topic 8 Discussion

ECCouncil Computer Hacking Forensic Investigator (CHFI-v10) 312-49v10 Question # 72 Topic 8 Discussion

312-49v10 Exam Topic 8 Question 72 Discussion:
Question #: 72
Topic #: 8

What happens lo the header of the file once It Is deleted from the Windows OS file systems?


A.

The OS replaces the first letter of a deleted file name with a hex byte code: E5h


B.

The OS replaces the entire hex byte coding of the file.


C.

The hex byte coding of the file remains the same, but the file location differs


D.

The OS replaces the second letter of a deleted file name with a hex byte code: Eh5


Get Premium 312-49v10 Questions

Contribute your Thoughts:


Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.