QUESTION 3 In NTFS, a deleted compressed file is hard to recover because it is encrypted. it uses multiple sectors. it requires Microsoft's secret compression algorithm it may be using multiple compression algorithms QUESTION 4 In a FAT system, the unallocated clusters from the point of view of forensics do not exist. O exist but have all zeros in them. retain data from previous allocations and are very useful therefore. retain data from previous allocations, are useless therefore QUESTION 5 The main purpose of volatility framework is 0 to analyze hard disks. to acquire memory data for forensics. to provide test data for analysis. to analyze memory data acquired using another tool