Guidance_Software
GD0-110 · Question #62
To undelete a file in the FAT file system, EnCase obtains the starting extent from the:
The correct answer is D. Directory entry. See the full explanation below for the reasoning.
Question
To undelete a file in the FAT file system, EnCase obtains the starting extent from the:
Options
- AFAT
- BFile header
- COperating system
- DDirectory entry
How the community answered
(28 responses)- A4% (1)
- B18% (5)
- C7% (2)
- D71% (20)
Community Discussion
No community discussion yet for this question.