When you carve an image, recovering the image depends on which of the following skills?
Answer(s): A
When a file is deleted by Windows Explorer or through the MS-DOS delete command, the operating system inserts __________ in the first letter position of the filename in the FAT database.
Answer(s): D
While working for a prosecutor, what do you think you should do if the evidence you found appears to be exculpatory and is not being released to the defense?
Answer(s): C
In Microsoft file structures, sectors are grouped together to form:
What type of file is represented by a colon (:) with a name following it in the Master File Table of NTFS disk?
Answer(s): B
Post your Comments and Discuss EC-Council 312-49 exam dumps with other Community members: