ECCouncil Exam Questions

When examining a hard disk without a write-blocker, you…

When examining a hard disk without a write-blocker, you should not start windows because Windows will write
data to the:

A.
Recycle Bin

B.
MSDOS.sys

C.
BIOS

D.
Case files