NTFS
Question
During a computer security forensic investigation, a laptop computer is retrieved that requires content analysis and information retrieval.
Which file system is on it, assuming it has the default installation of Microsoft Windows Vista operating system?
Answers
Explanations
Click on the arrows to vote for the correct answer
A. B. C. D. E.C.
The correct answer is C. NTFS (New Technology File System).
Microsoft Windows Vista operating system uses NTFS as the default file system for its installation. NTFS is a high-performance and secure file system that provides features such as file and folder permissions, encryption, compression, and data recovery.
When performing a computer security forensic investigation, retrieving data from a laptop computer that has the default installation of Microsoft Windows Vista operating system, you would expect to find the data stored on an NTFS partition. NTFS partitions allow for reliable and accurate forensic analysis of the data.
The other file systems listed as possible answers are not used as the default file system for the Microsoft Windows Vista operating system installation. HSFS is not a file system used in Windows operating systems, but is used in some Unix-based operating systems. WinFS was a file system developed by Microsoft but was never released to the public. FAT and FAT32 are older file systems used in older versions of Windows, such as Windows 95, Windows 98, and Windows ME. Windows Vista may support FAT and FAT32 as well, but NTFS is the default file system.
