In a forensic examination of hard drives for digital evidence, what type of user is most likely to have the most file slack to analyze?

In a forensic examination of hard drives for digital evidence, what type of user is most likely to have the most file slack to analyze?
A . one who has NTFS 4 or 5 partitions
B . one who uses dynamic swap file capability
C . one who uses hard disk writes on IRQ 13 and 21
D . one who has lots of allocation units per block or cluster

Answer: D

Latest 312-49v9 Dumps Valid Version with 547 Q&As

Latest And Valid Q&A | Instant Download | Once Fail, Full Refund

Leave a Reply

Your email address will not be published. Required fields are marked *

You may use these HTML tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <s> <strike> <strong>