GIAC
GCFE · Question #51
Which Windows filesystem is known for its use of journaling to help forensic analysts recover deleted files?
The correct answer is B. NTFS. See the full explanation below for the reasoning.
Question
Which Windows filesystem is known for its use of journaling to help forensic analysts recover deleted files?
Options
- AFAT32
- BNTFS
- CexFAT
- DReFS
How the community answered
(37 responses)- A8% (3)
- B76% (28)
- C3% (1)
- D14% (5)
Community Discussion
No community discussion yet for this question.