EC-Council
412-79V8 · Question #179
What does mactime, an essential part of the coroners toolkit do?
The correct answer is A. It traverses the file system and produces a listing of all files based on the modification. See the full explanation below for the reasoning.
Question
What does mactime, an essential part of the coroners toolkit do?
Options
- AIt traverses the file system and produces a listing of all files based on the modification,
- BIt can recover deleted file space and search it for datA. However, it does not allow the
- CThe tools scans for i-node information, which is used by other tools in the tool kit
- DIt is tool specific to the MAC OS and forms a core component of the toolkit
How the community answered
(20 responses)- A75% (15)
- B10% (2)
- C5% (1)
- D10% (2)
Community Discussion
No community discussion yet for this question.