This seems like a straightforward forensics question. I'd start by analyzing the applications and services running on the affected workstation to see if anything looks suspicious.
I almost went with option D just to see if the exam was trying to trick me. But nope, good old inode link count at 0 is the way to go. Gotta love those Ext2fs basics!
A file in Ext2fs is deleted when the inode internal link count reaches 0, not 10, 100, or 1. This is a basic file system concept that is crucial to understand for this exam.
Lucina
7 months agoMeaghan
7 months agoGwenn
7 months agoMaia
7 months agoIrma
7 months agoJanessa
8 months agoKassandra
8 months agoDaniel
8 months agoEdmond
8 months agoChristoper
8 months agoHaydee
8 months agoMitzie
8 months agoAngella
1 year agoAllene
12 months agoDevora
12 months agoSolange
12 months agoPamela
1 year agoSimona
1 year agoGeorgene
1 year agoMeghan
1 year agoTasia
1 year agoThora
1 year agoBrittani
1 year agoGenevive
11 months agoLaurel
11 months agoEffie
11 months agoBea
11 months agoGregoria
11 months agoLemuel
1 year agoRosalind
1 year agoKimberlie
1 year agoRossana
1 year agoMoon
1 year agoCeola
1 year agoJess
1 year agoErick
1 year agoChanel
1 year agoRolland
1 year agoHoward
1 year ago