Guidance_Software
GD0-110 · Question #62
GD0-110 Question #62: Real Exam Question with Answer & Explanation
The correct answer is D. Directory entry. See the full explanation below for the reasoning.
Question
To undelete a file in the FAT file system, EnCase obtains the starting extent from the:
Options
- AFAT
- BFile header
- COperating system
- DDirectory entry
Community Discussion
No community discussion yet for this question.