________ is an operating system feature that maintains a backup of user files; if a system crashes, the last saved copy of that file can be made available to the user
a. Copying
b. Digitizing
c. Logging
d. Journaling
Answer: D. HFS+ has case-sensitive journaling. Window NTFS has journaling, but it is not case-sensitive. Therefore, an investigator should ensure that the destination drive for files from a Mac is formatted with HFS+ and not NTFS. When examining files from a Mac computer, investigators should perform the analysis with a Mac computer.
You might also like to view...
You can get the big picture for the files stored on all the devices connected to your computer by using ____.
A. Internet Explorer B. Private folders C. Search D. File Explorer
What are the advantages and disadvantages of open-ended, closed-ended, and range-of-response questions?
What will be an ideal response?
Use a multilevel list to add a visual ________ structure to the items in a list
Fill in the blank(s) with correct word
Which tool enables you to see all applications or programs currently running or to close an application that has stopped working?
A. System Monitor B. Event Viewer C. System Configuration D. Task Manager