Why is “slack space” of value to an information security manager as pan of an incident investigation?
A.
Hidden data may be stored there
B.
The slack space contains login information
C.
Slack space is encrypted
D.
It provides flexible space for the investigation
Explanation:
“Slack space” is the unused space between where the fdc data end and the end of the cluster the data occupy.
Login information is not typically stored in the slack space. Encryption for the slack space is no different from the rest of the file system. The slack space is not a viable means of storage during an investigation.