ECCouncil Exam Questions

When examining a hard disk without a write-blocker, you should not start windows because Windows wil

seenagape

When examining a hard disk without a write-blocker, you should not start windows because
Windows will write data to the:

A.
Recycle Bin

B.
MSDOS.sys

C.
BIOS D.
Case files