Which type of partition space cannot be accessed by the operating system and may contain hidden data?

• A. Volume slack
• B. Unallocated space
• C. File slack
• D. Protected space

Answer: (B)

Unallocated space is disk space that has not been assigned to any partition or volume. Because there’s no filesystem present in that region, the operating system cannot access it through normal file-system interfaces. Yet this space can still hold data remnants, remnants from deleted files, or even hidden partitions, making it a prime target for forensic analysis when searching for hidden data. In contrast, slack space exists within a partition’s allocated area and is tied to the filesystem, which the OS can conceptually access through its file structures, and “protected space” isn’t a standard term used for this context.