This seems like a straightforward forensics question. I'd start by analyzing the applications and services running on the affected workstation to see if anything looks suspicious.
I almost went with option D just to see if the exam was trying to trick me. But nope, good old inode link count at 0 is the way to go. Gotta love those Ext2fs basics!
A file in Ext2fs is deleted when the inode internal link count reaches 0, not 10, 100, or 1. This is a basic file system concept that is crucial to understand for this exam.
Lucina
10 months agoMeaghan
10 months agoGwenn
10 months agoMaia
10 months agoIrma
11 months agoJanessa
11 months agoKassandra
11 months agoDaniel
11 months agoEdmond
11 months agoChristoper
11 months agoHaydee
11 months agoMitzie
11 months agoAngella
1 year agoAllene
1 year agoDevora
1 year agoSolange
1 year agoPamela
1 year agoSimona
1 year agoGeorgene
1 year agoMeghan
1 year agoTasia
1 year agoThora
1 year agoBrittani
1 year agoGenevive
1 year agoLaurel
1 year agoEffie
1 year agoBea
1 year agoGregoria
1 year agoLemuel
1 year agoRosalind
1 year agoKimberlie
1 year agoRossana
1 year agoMoon
1 year agoCeola
1 year agoJess
1 year agoErick
1 year agoChanel
1 year agoRolland
1 year agoHoward
1 year ago