nerdexam
EC-CouncilEC-Council

312-49 · Question #525

312-49 Question #525: Real Exam Question with Answer & Explanation

The correct answer is C: FileSalvage. FileSalvage is a Mac-native file recovery tool designed to scan and recover deleted files from macOS drives and storage media. Xplico is a network forensics tool used to extract application data from packet captures. Colasoft's Capsa is a network analyzer and packet sniffer. Driv

Submitted by kev92· Apr 18, 2026Disk Forensics

Question

Charles has accidentally deleted an important file while working on his Mac computer. He wants to recover the deleted file as it contains some of his crucial business secrets. Which of the following tool will help Charles?

Options

  • AXplico
  • BColasoft's Capsa
  • CFileSalvage
  • DDriveSpy

Explanation

FileSalvage is a Mac-native file recovery tool designed to scan and recover deleted files from macOS drives and storage media. Xplico is a network forensics tool used to extract application data from packet captures. Colasoft's Capsa is a network analyzer and packet sniffer. DriveSpy is a DOS-based forensic hard drive analysis tool used in investigations, not general file recovery on a Mac. Only FileSalvage targets the macOS platform for recovering deleted files.

Topics

#File recovery#Data recovery tools#Mac data recovery

Community Discussion

No community discussion yet for this question.

Full 312-49 PracticeBrowse All 312-49 Questions