During a corporate cyber espionage case in Austin, Texas, forensic investigators analyze how the company...

The correct answer is D because a shared folder accessed over SMB from multiple departments is the typical behavior of Network-Attached Storage. NAS provides file-level access over the network using protocols such as SMB or NFS, making it ideal for shared departmental folders and common user access. That matches the scenario exactly. By contrast, the question separately mentions a high-speed Fibre Channel storage fabric for databases, which is characteristic of a Storage Area Network rather than the shared folder system being asked about. RAID is a disk redundancy or performance arrangement, not a network storage access model, and JBOD simply refers to a grouping of disks without describing a networked file-sharing architecture. CHFI v11 includes NAS and SAN storage concepts under digital evidence fundamentals, so candidates are expected to distinguish file-level network storage from block-level storage fabrics. In exam terms, when the clue is SMB-accessible shared folders used by multiple departments, the correct storage model is NAS. The Fibre Channel reference is included to contrast it with SAN and test whether the candidate can separate the two architectures correctly.