This seems like a straightforward forensics question. I'd start by analyzing the applications and services running on the affected workstation to see if anything looks suspicious.
I almost went with option D just to see if the exam was trying to trick me. But nope, good old inode link count at 0 is the way to go. Gotta love those Ext2fs basics!
A file in Ext2fs is deleted when the inode internal link count reaches 0, not 10, 100, or 1. This is a basic file system concept that is crucial to understand for this exam.
Lucina
5 months agoMeaghan
5 months agoGwenn
6 months agoMaia
6 months agoIrma
6 months agoJanessa
6 months agoKassandra
6 months agoDaniel
6 months agoEdmond
6 months agoChristoper
6 months agoHaydee
6 months agoMitzie
6 months agoAngella
11 months agoAllene
10 months agoDevora
10 months agoSolange
10 months agoPamela
11 months agoSimona
11 months agoGeorgene
11 months agoMeghan
11 months agoTasia
11 months agoThora
12 months agoBrittani
12 months agoGenevive
10 months agoLaurel
10 months agoEffie
10 months agoBea
10 months agoGregoria
10 months agoLemuel
11 months agoRosalind
11 months agoKimberlie
11 months agoRossana
12 months agoMoon
11 months agoCeola
11 months agoJess
11 months agoErick
11 months agoChanel
1 year agoRolland
1 year agoHoward
1 year ago