QUESTION: 101 Topic 3, Volume C

When examining a file with a Hex Editor, what space does the file header occupy?

the last several bytes of the file
the first several bytes of the file
none, file headers are contained in the FAT
one byte at the beginning of the file

Answer(s): D

Reveal Solution Next Question

QUESTION: 102 Topic 3, Volume C

In the context of file deletion process, which of the following statement holds true?

When files are deleted, the data is overwritten and the cluster marked as available
The longer a disk is inuse, the less likely it is that deleted files will be overwritten
While booting, the machine may create temporary files that can delete evidence
Secure delete programs work by completely overwriting the file in one go

Answer(s): C,D

Reveal Solution Next Question

QUESTION: 103 Topic 3, Volume C

A suspect is accused of violating the acceptable use of computing resources, as he has visited adult websites and downloaded images. The investigator wants to demonstrate that the suspect did indeed visit these sites. However, the suspect has cleared the search history and emptied the cookie cache. Moreover, he has removed any images he might have downloadeD. What can the investigator do to prove the violation? Choose the most feasible option.