nerdexam
EC-Council

312-49V9 · Question #225

A forensics investigator is searching the hard drive of a computer for files that were recently moved to the Recycle Bin. He searches for files in C:\RECYCLED using a command line tool but does not…

The correct answer is C. The files are hidden and he must use switch to view themThe files are hidden and he must use ? See the full explanation below for the reasoning.

Question

A forensics investigator is searching the hard drive of a computer for files that were recently moved to the Recycle Bin. He searches for files in C:\RECYCLED using a command line tool but does not find anything. What is the reason for this?

Options

  • AHe should search in C:\Windows\System32\RECYCLED folder
  • BThe Recycle Bin does not exist on the hard drive
  • CThe files are hidden and he must use switch to view themThe files are hidden and he must use ?
  • DOnly FAT system contains RECYCLED folder and not NTFS

How the community answered

(58 responses)
  • A
    7% (4)
  • B
    14% (8)
  • C
    78% (45)
  • D
    2% (1)

Community Discussion

No community discussion yet for this question.

Full 312-49V9 Practice