GIAC Certified Forensic Analyst (GCFA) — Question 46

Which of the following statements is true for a file in the UNIX operating system?

Answer options

• A. It is a collection of information, which cannot be data or documents.
• B. It is a directory entry that points to an original file somewhere else.
• C. It is a collection of information, which can be data, an application, or documents.
• D. It is a collection of information, which can be only documents.

Correct answer: A

Explanation

The correct answer is A, as it accurately states that a file in UNIX is a collection of information, but it cannot be categorized as just data or documents. Options B and D are incorrect because they misrepresent the nature of a file in UNIX. Option C is also wrong since it suggests that files can be applications, which is not aligned with the definition provided.