Question $12$

Given FAT Directory Entries for multiple files below $($filenames intentionally omitted$)...$ Which file is deleted?

$```$

n iEMO.........

a$.$f$\mathrm{.}0...\backslash \%.$

$\mathrm{.}1\mathrm{.}0...$n$...$

s$.$t$.$e$...$rm$.$

$\mathrm{.}1.$u$...$m$.$e$.$

$$-1....$ e

$```$

The file whose directory entry begins at offset $\backslash (0\backslash$times $410080\backslash )$

The file whose directory entry begins at offset $0$x$4100$A$0$

The file whose directory entry begins at offset $0$x$4100$C$0$

The file whose directory entry begins at offset $0$x$4100$E$0$

Question $13$

Given the following MFT Data RunList, what is the starting cluster of the file? $($Hex$)$

$421$E $0$B $21$ D$6101$C

$01$E $0$B $21$ D$6$

$0$xD$6101$ C

$010$ D$6210$ B

$0$x$1$C $10$ D$621$

Question $14$

Given the following MFT Data RunList, how many clusters $($in decimal$)$ are in the $2$nd fragment?

$3131432$F $11419$E $1$D C$50401$

$31$

$43$

$41$

$158$