When examining a hard disk without a write-blocker, you should not start windows because Windows will write data to the:

A. Recycle Bin

B. MSDOS.sys

C. BIOS

D. Case files








 

Suggested Answer: A

Community Answer: D



This question is in 312-49 Computer Hacking Forensic Investigator Exam. 
For getting Computer Hacking Forensic Investigator (CHFI).







Disclaimers:
The website is not related to, affiliated with, endorsed or authorized by EC-Council. 
Trademarks, certification & product names are used for reference only and belong to EC-Council.
The website does not contain actual questions and answers from EC-Council's Certification Exams.