Consider that you are investigating a machine running an Windows OS released prior to Windows...

Vendor: ECCouncil
Product: 312-49v10
Update on: Jul 30, 2025
Questions: 704

ECCouncil 312-49v10 Question Answer

Consider that you are investigating a machine running an Windows OS released prior to Windows Vista. You are trying to gather information about the deleted files by examining the master database file named INFO2 located at C:\Recycler\\. You read an entry named "Dd5.exe". What does Dd5.exe mean?

D drive. fifth file deleted, a .exe file

D drive, fourth file restored, a .exe file

D drive, fourth file deleted, a .exe file

D drive, sixth file deleted, a .exe file