Computer Hacking Forensic Investigator (CHFI v10) — Question 37

Watson, a forensic investigator, is examining a copy of an ISO file stored in CDFS format. What type of evidence is this?

Answer options

• A. Data from a CD copied using Windows
• B. Data from a CD copied using Mac-based system
• C. Data from a DVD copied using Windows system
• D. Data from a CD copied using Linux system

Correct answer: A

Explanation

The correct answer is A because CDFS, or Compact Disc File System, is typically associated with CDs that are formatted and used with Windows systems. Options B and D are incorrect because they refer to Mac and Linux systems, respectively, while option C incorrectly mentions DVDs instead of CDs.