Computer Hacking Forensic Investigator (CHFI v10) — Question 16

The rule of thumb when shutting down a system is to pull the power plug. However, it has certain drawbacks. Which of the following would that be?

Answer options

• A. Any data not yet flushed to the system will be lost
• B. All running processes will be lost
• C. The /tmp directory will be flushed
• D. Power interruption will corrupt the pagefile

Correct answer: A

Explanation

The correct answer is A because when the power is abruptly cut, any data that hasn't been written to disk will be permanently lost. While B is also true, it doesn't specifically address the issue of data loss. C is incorrect as the /tmp directory may not necessarily be flushed during abrupt shutdowns, and D is not definitive as power loss does not always corrupt the pagefile.