Welcome to ExamTopics
ExamTopics Logo
- Expert Verified, Online, Free.
exam questions

Exam 312-49v10 All Questions

View all questions & answers for the 312-49v10 exam

Exam 312-49v10 topic 1 question 214 discussion

Actual exam question from ECCouncil's 312-49v10
Question #: 214
Topic #: 1
[All 312-49v10 Questions]

When carrying out a forensics investigation, why should you never delete a partition on a dynamic disk?

  • A. All virtual memory will be deleted
  • B. The wrong partition may be set to active
  • C. This action can corrupt the disk
  • D. The computer will be set in a constant reboot state
Show Suggested Answer Hide Answer
Suggested Answer: C 🗳️

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
aqeel1506
4 months, 1 week ago
The correct answer is C. This action can corrupt the disk. When carrying out a forensic investigation, it's essential to preserve the integrity of the evidence, which includes the disk and its partitions. Deleting a partition on a dynamic disk can lead to corruption of the entire disk, causing data loss and potentially compromising the investigation. Dynamic disks use a database to manage disk configuration and partition information, and deleting a partition can update this database, potentially overwriting important evidence. Additionally, dynamic disks often have complex relationships between partitions, and deleting one partition can affect others, leading to unintended consequences.
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...