EC-Council
312-49V9 · Question #304
While searching through a computer under investigation, you discover numerous files that appear to have had the first letter of the file name replaced by the hex code byte 5h. What does this…
The correct answer is B. The files have been marked for deletion. See the full explanation below for the reasoning.
Question
While searching through a computer under investigation, you discover numerous files that appear to have had the first letter of the file name replaced by the hex code byte 5h. What does this indicate on the computer?
Options
- AThe files have been marked as hidden
- BThe files have been marked for deletion
- CThe files are corrupt and cannot be recovered
- DThe files have been marked as read-only
How the community answered
(41 responses)- A12% (5)
- B80% (33)
- C5% (2)
- D2% (1)
Community Discussion
No community discussion yet for this question.