ECCouncil Computer Hacking Forensic Investigator EC0-349 Question # 12 Topic 2 Discussion

ECCouncil Computer Hacking Forensic Investigator EC0-349 Question # 12 Topic 2 Discussion

EC0-349 Exam Topic 2 Question 12 Discussion:
Question #: 12
Topic #: 2

Where does Encase search to recover NTFS files and folders?


A.

MBR


B.

MFT


C.

Slack space


D.

HAL


Get Premium EC0-349 Questions

Contribute your Thoughts:


Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.