Exam 312-49v10 topic 1 question 15 discussion

Not A because space is not immediately overwritten. Not D because secure erase is multiple wipes

It can be C, but the most correct answer is D. A is incorrect: When deleting a file, the content of the file is not usually overwritten; the file system simply marks the clusters as available. The data remains on the disk until another file overwrites it. B is incorrect: It's the other way around: the more time the disk is used, the MORE likely it is that the sectors occupied by deleted files will be overwritten by new data. C can be correct: This is partially true, but it is very general and less relevant compared to other options. The creation of temporary files can overwrite sectors that contained evidence, but that is not its direct purpose. D is definitely correct: Secure deletion programs overwrite the file (one or several times) with random data or specific patterns, making its recovery irreversible

A file that is deleted is not gone only the pointer is. It must be securely wipes to be gone.

A. When files are deleted, the data is overwritten and the cluster marked as available.