This seems like a straightforward forensics question. I'd start by analyzing the applications and services running on the affected workstation to see if anything looks suspicious.
I almost went with option D just to see if the exam was trying to trick me. But nope, good old inode link count at 0 is the way to go. Gotta love those Ext2fs basics!
A file in Ext2fs is deleted when the inode internal link count reaches 0, not 10, 100, or 1. This is a basic file system concept that is crucial to understand for this exam.
Lucina
8 months agoMeaghan
8 months agoGwenn
9 months agoMaia
9 months agoIrma
9 months agoJanessa
9 months agoKassandra
9 months agoDaniel
9 months agoEdmond
9 months agoChristoper
9 months agoHaydee
10 months agoMitzie
10 months agoAngella
1 year agoAllene
1 year agoDevora
1 year agoSolange
1 year agoPamela
1 year agoSimona
1 year agoGeorgene
1 year agoMeghan
1 year agoTasia
1 year agoThora
1 year agoBrittani
1 year agoGenevive
1 year agoLaurel
1 year agoEffie
1 year agoBea
1 year agoGregoria
1 year agoLemuel
1 year agoRosalind
1 year agoKimberlie
1 year agoRossana
1 year agoMoon
1 year agoCeola
1 year agoJess
1 year agoErick
1 year agoChanel
1 year agoRolland
1 year agoHoward
1 year ago