ECCouncil Computer Hacking Forensic Investigator (V9) 312-49v9 Question # 1 Topic 1 Discussion

ECCouncil Computer Hacking Forensic Investigator (V9) 312-49v9 Question # 1 Topic 1 Discussion

312-49v9 Exam Topic 1 Question 1 Discussion:
Question #: 1
Topic #: 1

Which of the following refers to the data that might still exist in a cluster even though the original file has been overwritten by another file?


A.

Sector


B.

Metadata


C.

MFT


D.

Slack Space


Get Premium 312-49v9 Questions

Contribute your Thoughts:


Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.