Computer Hacking Forensic Investigator (CHFI) — Question 35

Watson, a forensic investigator, is examining a copy of an ISO file stored in CDFS format. What type of evidence is this?

Answer options

• A. Data from a CD copied using Windows
• B. Data from a CD copied using Mac-based system
• C. Data from a DVD copied using Windows system
• D. Data from a CD copied using Linux system

Correct answer: A

Explanation

The correct answer is A because CDFS stands for Compact Disc File System, which is primarily associated with CDs copied on Windows systems. Options B, C, and D refer to formats or systems that do not relate directly to the CDFS format of the ISO file in question.