Which term refers to the unused space between the end of a file and the end of its last data cluster?

Which term refers to the unused space between the end of a file and the end of its last data cluster?

• A. Volume slack
• B. Unallocated space
• C. File slack
• D. Metadata gap

Answer: (C)

The concept being tested is how file storage works with fixed-size allocation units. On many file systems, space is allocated in clusters. A file’s data may not completely fill the final cluster it uses, leaving the tail of that cluster unused. That unused portion is called file slack. It’s specific to the file’s own allocated space, not to free space on the disk. This is different from unallocated space, which is disk space not assigned to any file at all. The other terms aren’t standard descriptors for this situation. File slack can contain remnants of data and is a potential source of forensic artifacts, since the unused bytes may hold traces of previous content or hidden information.

The concept being tested is how file storage works with fixed-size allocation units. On many file systems, space is allocated in clusters. A file’s data may not completely fill the final cluster it uses, leaving the tail of that cluster unused. That unused portion is called file slack. It’s specific to the file’s own allocated space, not to free space on the disk. This is different from unallocated space, which is disk space not assigned to any file at all. The other terms aren’t standard descriptors for this situation. File slack can contain remnants of data and is a potential source of forensic artifacts, since the unused bytes may hold traces of previous content or hidden information.