nerdexam
EC-Council

312-49 · Question #235

In the context of file deletion process, which of the following statement holds true?

Sign in or unlock 312-49 to reveal the answer and full explanation for question #235. The question stem and answer options stay visible for context.

Submitted by viktor_hu· Apr 18, 2026Disk Forensics

Question

In the context of file deletion process, which of the following statement holds true?

Options

  • AWhen files are deleted, the data is overwritten and the cluster marked as available
  • BThe longer a disk is in use, the less likely it is that deleted files will be overwritten
  • CWhile booting, the machine may create temporary files that can delete evidence
  • DSecure delete programs work by completely overwriting the file in one go

Unlock 312-49 to see the answer

You've previewed enough free 312-49 questions. Unlock 312-49 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Topics

#File deletion process#Data overwriting#Forensic data integrity#Temporary files
Full 312-49 Practice