ECCouncil Exam Questions

When examining a hard disk without a write-blocker, you should not start windows because Windows wil

When examining a hard disk without a write-blocker, you should not start windows because Windows will write data to the:

A.
Recycle Bin

B.
MSDOS.sys

C.
BIOS

D.
Case files