Solved

You Are Examining a Hard Drive That Has Windows XP

Question 97

Multiple Choice

You are examining a hard drive that has Windows XP installed as the operating system. You see a file that has a date and time in the deleted column. Where does that date and time come from?


A) Directory Entry
B) Info2 file
C) Inode Table
D) Master File Table

Correct Answer:

verifed

Verified

Unlock this answer now
Get Access to more Verified Answers free of charge

Related Questions

Q92: What files are reconfigured or deleted by

Q93: A hash set would most accurately be

Q94: The temporary folder of a case cannot

Q95: How does EnCase verify that the evidence

Q96: The following GREP expression was typed in

Q98: In DOS acquisition mode, if a physical

Q99: Within EnCase, what is the purpose of

Q100: A CPU is:<br>A) A chip that would

Q101: If cluster number 10 in the FAT

Q102: The boot partition table found at the