Jason discovered a file named $RIYG6VR.doc in the C:\$Recycle.Bin\<USER SID>\ while analyzing a hard disk image for the deleted data. What inferences can he make from the file name?
A.
It is a doc file deleted in seventh sequential order
B.
RIYG6VR.doc is the name of the doc file deleted from the system
The correct answer is D. It is a deleted doc file.
The file name $RIYG6VR.doc is a renamed file in the $Recycle.Bin folder, which indicates that it's a deleted file. The original file name has been changed to a random name by Windows when it was deleted.
Here's what we can infer from the file name:
The $R prefix indicates that the file was deleted from the C: drive (not the R: drive).
The IYG6VR part is a random generated name by Windows.
The .doc extension suggests that the original file was a Microsoft Word document.
upvoted 1 times
...
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
aqeel1506
4 months, 1 week ago