When undeleting a file in the FAT file system, EnCase will check the _____________ to see if it has already been overwritten.
A. data on the hard drive
B. deletion table
C. directory entry
D. FAT
Answer:D
When undeleting a file in the FAT file system, EnCase will check the _____________ to see if it has already been overwritten.
A. data on the hard drive B. deletion table C. directory entry D. FAT