This seems like a straightforward forensics question. I'd start by analyzing the applications and services running on the affected workstation to see if anything looks suspicious.
I almost went with option D just to see if the exam was trying to trick me. But nope, good old inode link count at 0 is the way to go. Gotta love those Ext2fs basics!
A file in Ext2fs is deleted when the inode internal link count reaches 0, not 10, 100, or 1. This is a basic file system concept that is crucial to understand for this exam.
Lucina
4 months agoMeaghan
4 months agoGwenn
4 months agoMaia
4 months agoIrma
4 months agoJanessa
5 months agoKassandra
5 months agoDaniel
5 months agoEdmond
5 months agoChristoper
5 months agoHaydee
5 months agoMitzie
5 months agoAngella
10 months agoAllene
9 months agoDevora
9 months agoSolange
9 months agoPamela
9 months agoSimona
10 months agoGeorgene
9 months agoMeghan
9 months agoTasia
10 months agoThora
10 months agoBrittani
10 months agoGenevive
8 months agoLaurel
8 months agoEffie
8 months agoBea
8 months agoGregoria
8 months agoLemuel
9 months agoRosalind
10 months agoKimberlie
10 months agoRossana
10 months agoMoon
9 months agoCeola
9 months agoJess
10 months agoErick
10 months agoChanel
11 months agoRolland
11 months agoHoward
11 months ago