312-49 · Question #612
When a user deletes a file, the system creates a $I file to store its details. What detail does the $I file not contain?
The correct answer is B. File origin and modification. In Windows, when a file is moved to the Recycle Bin, the system creates two hidden files: a $R file (which holds the actual file content) and a $I file (which stores metadata about the deleted file). The $I file records the original file name, original file path, file size, and…
Question
When a user deletes a file, the system creates a $I file to store its details. What detail does the $I file not contain?
Options
- AFile Size
- BFile origin and modification
- CTime and date of deletion
- DFile Name
How the community answered
(22 responses)- B86% (19)
- C5% (1)
- D9% (2)
Explanation
In Windows, when a file is moved to the Recycle Bin, the system creates two hidden files: a $R file (which holds the actual file content) and a $I file (which stores metadata about the deleted file). The $I file records the original file name, original file path, file size, and the date and time of deletion. However, the $I file does not store file origin/modification history or timestamps from the file's prior activity (such as when it was created, last modified, or last accessed before deletion). That kind of metadata would be found in the MFT (Master File Table) or the file's own directory entry, not in the $I metadata file.
Topics
Community Discussion
No community discussion yet for this question.