Briefly describe how to delete FAT files.
What will be an ideal response?
ANSWER: When a file is deleted in Windows Explorer or with the MS-DOS delete command, the OS inserts a HEX E5 (0xE5) in the filename’s first letter position in the associated directory entry. This value tells the OS that the file is no longer available and a new file can be written to the same cluster location.
In the FAT file system, when a file is deleted, the only modifications made are that the directory entry is marked as a deleted file, with the HEX E5 character replacing the first letter of the filename, and the FAT chain for that file is set to 0. The data in the file remains on the disk drive. The area of the disk where the deleted file resides becomes unallocated disk space (also called “free disk space”). The unallocated disk space is now available to receive new data from newly created files or other files needing more space as they grow. Most forensics tools can recover data still residing in this area.
You might also like to view...
What is an ISO image? How do you burn an ISO image to a DVD?
What will be an ideal response?
A decision can be made in a Java program with a(n) _____________.
Fill in the blank(s) with the appropriate word(s).
A(n) ________ refers to one of the five page formats that a presentation can be presented on
Fill in the blank(s) with correct word
You should include a ________ with your application to summarize your skills, accomplishments, and work history as it relates to a prospective job
A) career portfolio B) cover letter C) letter of recommendation D) resume