Why is “slack space” of value to an information security manager as pan of an incident
investigation?

A.
Hidden data may be stored there

B.
The slack space contains login information

C.
Slack space is encrypted

D.
It provides flexible space for the investigation

Explanation:

“Slack space” is the unused space between where the fdc data end and the end of the cluster the
data occupy. Login information is not typically stored in the slack space. Encryption for the slack
space is no different from the rest of the file system. The slack space is not a viable means of
storage during an investigation.