Understanding Cisco Cybersecurity Operations Fundamentals (CBROPS) — Question 299

An investigator is examining a copy of an ISO file that is stored in CDFS format.
What type of evidence is this file?

Answer options

• A. data from a CD copied using Mac-based system
• B. data from a CD copied using Linux system
• C. data from a DVD copied using Windows system
• D. data from a CD copied using Windows

Correct answer: D

Explanation

The correct answer is D because CDFS (CD File System) is typically associated with CDs and is commonly used in Windows environments. Options A and B refer to Mac and Linux systems, which are not relevant to the CDFS format, while option C mentions a DVD, which is not applicable to the context of a CD-based ISO file.