ECCouncil Computer Hacking Forensic Investigator (V9) 312-49v9 Question # 111 Topic 12 Discussion

ECCouncil Computer Hacking Forensic Investigator (V9) 312-49v9 Question # 111 Topic 12 Discussion

312-49v9 Exam Topic 12 Question 111 Discussion:
Question #: 111
Topic #: 12

A forensics investigator is searching the hard drive of a computer for files that were recently moved to the Recycle Bin. He searches for files in C:\RECYCLED using a command line tool but does not find anything. What is the reason for this?


A.

He should search in C:\Windows\System32\RECYCLED folder


B.

The Recycle Bin does not exist on the hard drive


C.

The files are hidden and he must use switch to view them


D.

Only FAT system contains RECYCLED folder and not NTFS


Get Premium 312-49v9 Questions

Contribute your Thoughts:


Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.