EC-Council
312-49V11 · Question #146
312-49V11 Question #146: Real Exam Question with Answer & Explanation
Sign in or unlock 312-49V11 to reveal the answer and full explanation for question #146. The question stem and answer options stay visible for context.
Question
A digital forensic investigator is tasked with analyzing an NTFS image file extracted from a pen drive. They leverage The Sleuth Kit (TSK) for this task, specifically utilizing the fsstat command- line tool. By employing fsstat, they delve into the file system's intricate details, such as metadata, inode numbers, and block or cluster information, thereby facilitating a comprehensive examination. How can an investigator use TSK to analyze disk images?
Options
- ABy performing network scans
- BBy conducting manual inspections
- CBy using the plug-in framework
- DBy writing custom code
Unlock 312-49V11 to see the answer
You've previewed enough free 312-49V11 questions. Unlock 312-49V11 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.