Welcome to ExamTopics
ExamTopics Logo
- Expert Verified, Online, Free.
exam questions

Exam 312-49v10 All Questions

View all questions & answers for the 312-49v10 exam

Exam 312-49v10 topic 1 question 787 discussion

Actual exam question from ECCouncil's 312-49v10
Question #: 787
Topic #: 1
[All 312-49v10 Questions]

A digital forensics investigator is examining a suspect's hard disk drive. The hard disk is known to have 16,384 cylinders, 16 heads, and 63 sectors per track, with a sector size of 512 bytes. During the investigation, the forensic analyst identifies a particular file that resides in two sectors. Considering that each sector contains data plus overhead information such as ID, synchronization fields. ECC, and gaps, what is the maximum potential size of this particular file stored on the disk?

  • A. More than 512 bytes but less than 1024 bytes
  • B. Equal to or more than 1024 bytes
  • C. Equal to 512 bytes
  • D. Less than 512 bytes
Show Suggested Answer Hide Answer
Suggested Answer: D 🗳️

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
4bd3116
4 months ago
Selected Answer: B
Data size in two sectors: 2 × 512 bytes = 1024 bytes
upvoted 1 times
...
Elb
5 months, 2 weeks ago
Selected Answer: A
A > Since file resides in two sectors.. it is more than 512 but less than 1024..
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...