READ Free Dumps For ECCouncil- EC0-349
| Question ID 21296 | Which of the following should a computer forensics investigations lab have? |
| Option A | isolation |
| Option B | restricted access |
| Option C | open access |
| Option D | an entry log |
| Correct Answer | B |
| Question ID 21297 | What happens when a file is deleted by a Microsoft operating system using the FAT file system? |
| Option A | a copy of the file is stored and the original file is erased |
| Option B | the file is erased and cannot be recovered |
| Option C | only the reference to the file is removed from the FAT |
| Option D | the file is erased but can be recovered |
| Correct Answer | C |