It May Not Be Possible to Recover the File Names

question 16

Multiple Choice

It may not be possible to recover the file names and date-time stamps from an HFS volume with forensic tools because:

• A) That information is overwritten when a file is deleted.
• B) The inode table is deleted.
• C) That information is only held in memory.
• D) The B-tree data structure frequently rebalances.

---

Definitions:

Express Warranty

A clearly stated promise or guarantee about the quality or durability of a product, usually offered at the point of sale.

Enforceable

Capable of being imposed or carried out by law.

Warranties of Assignability

Guarantees that rights or interests can be transferred from one party to another in a contract or agreement.

Common Law

A body of unwritten laws based on legal precedents established by the courts.