EC-Council
312-49V9 · Question #528
Jason discovered a file named $RIYG6VR.doc in the C:\$Recycle.Bin\<USER SID>\ while analyzing a hard disk image for the deleted data. What inferences can he make from the file name?
The correct answer is D. It is a deleted doc file. See the full explanation below for the reasoning.
Question
Jason discovered a file named $RIYG6VR.doc in the C:$Recycle.Bin<USER SID>\ while analyzing a hard disk image for the deleted data. What inferences can he make from the file name?
Options
- AIt is a doc file deleted in seventh sequential order
- BRIYG6VR.doc is the name of the doc file deleted from the system
- CIt is file deleted from R drive
- DIt is a deleted doc file
How the community answered
(33 responses)- A3% (1)
- B9% (3)
- C15% (5)
- D73% (24)
Community Discussion
No community discussion yet for this question.