312-49V11: Computer Hacking Forensic InvestigatorDemo

By ECCouncil · Question Mode

QuestionQ123

Digital Evidence

The Recycle Bin serves as a metaphor for discarding files, while also enabling users to retrieve and restore them. After a file is moved to the Recycle Bin, a record is added to the log file located in the Recycle Bin. Which of the following files contains records corresponding to each deleted file in the Recycle Bin?

  • A INFO2
  • B INFO1
  • C LOGINFO1
  • D LOGINFO2
Explanation

In legacy Windows Recycle Bin structures, the INFO2 file is the index/log file containing an entry for each deleted file. Its records retain metadata needed to identify and restore deleted items.

Community Discussion

No comments yet. Be the first to start the discussion!