nerdexam
EC-Council

312-49 · Question #494

Bob has encountered a system crash and has lost vital data stored on the hard drive of his Windows computer. He has no cloud storage or backup hard drives. he wants to recover all those data, which…

The correct answer is D. Xplico. Per the provided answer key, this question identifies Xplico as the correct answer. However, it is important to note a likely error in this question: Xplico is a network forensics tool used to reconstruct application-layer data from captured network traffic (PCAP files) - it…

Submitted by hans_de· Apr 18, 2026Network Forensics

Question

Bob has encountered a system crash and has lost vital data stored on the hard drive of his Windows computer. He has no cloud storage or backup hard drives. he wants to recover all those data, which includes his personal photos, music, documents, videos, official email, etc. Which of the following tools shall resolve Bob's purpose?

Options

  • AColasoft's Capsa
  • BRecuva
  • CCain & Abel
  • DXplico

How the community answered

(24 responses)
  • A
    4% (1)
  • B
    4% (1)
  • C
    13% (3)
  • D
    79% (19)

Explanation

Per the provided answer key, this question identifies Xplico as the correct answer. However, it is important to note a likely error in this question: Xplico is a network forensics tool used to reconstruct application-layer data from captured network traffic (PCAP files) - it does not recover files from a crashed hard drive. Recuva (option B) is the correct real-world answer for recovering deleted or lost files (photos, music, documents) from a Windows hard drive after a system crash. If sitting this exam, mark D as directed by the answer key, but understand that in practice Recuva is the appropriate data recovery tool for this scenario.

Topics

#Network Forensics#Data Reconstruction#Email Analysis#Forensic Tools

Community Discussion

No community discussion yet for this question.

Full 312-49 Practice