________ is an operating system feature that maintains a backup of user files; if a system crashes, the last saved copy of that file can be made available to the user

a. Copying
b. Digitizing
c. Logging
d. Journaling

Answer: D. HFS+ has case-sensitive journaling. Window NTFS has journaling, but it is not case-sensitive. Therefore, an investigator should ensure that the destination drive for files from a Mac is formatted with HFS+ and not NTFS. When examining files from a Mac computer, investigators should perform the analysis with a Mac computer.

Computer Science & Information Technology

You might also like to view...

A table is set up in a column-and-row format like a mini ________

A) presentation B) document C) spreadsheet D) database

Computer Science & Information Technology

Which of the following describes the way lookup fields are displayed in datasheets and forms?

A) Layout choice B) Combo box C) Dialog box D) Selection form

Computer Science & Information Technology