exam questions

Exam 312-49 All Questions

View all questions & answers for the 312-49 exam

Exam 312-49 topic 1 question 366 discussion

Actual exam question from ECCouncil's 312-49
Question #: 366
Topic #: 1
[All 312-49 Questions]

Annie is searching for certain deleted files on a system running Windows XP OS. Where will she find the files if they were not completely deleted from the system?

  • A. C: $Recycled.Bin
  • B. C: \$Recycle.Bin
  • C. C:\RECYCLER
  • D. C:\$RECYCLER
Show Suggested Answer Hide Answer
Suggested Answer: B 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Ripley522
Highly Voted 3 years, 10 months ago
I mean answer should be C. C:\RECYCLER
upvoted 9 times
...
Ceh2024
Most Recent 8 months ago
Selected Answer: C
The correct answer is C :\RECYCLER. Computer Hacking Forensics Investigator (CHFI) Version 10 EC-Council. Pg. 431
upvoted 1 times
...
Bodescu
2 years, 11 months ago
From the official CHFI Exam guide. Pag.208, chap. 4 "■ On FAT file systems, the folder is named Recycled. For example, on your C: the storage location of the Recycle Bin would be C:\RECYCLED. ■ On NTFS file systems used by Windows NT, 2000, and XP, this folder is named Recycler. For example, on your C: the storage location of the Recycle Bin would be C:\RECYCLER. ■ On NTFS file systems used by Windows Vista, this folder is named $Recycle.Bin. For example, on your C: the storage location of the Recycle Bin would be C:\RECYCLE.BIN." So, answer should be C
upvoted 2 times
...
Cytrail
3 years, 1 month ago
Drive:\Recycled = Win 98 and Prior Win Versions Drive:\Recycler = Win 2000, Win XP & Win NT Drive:\$Recycle.Bin = Win Vista, Win 7, Win 8, Win 10, Win... With these few points of mine, the answer is "B".
upvoted 2 times
...
stickerbush1970
3 years, 2 months ago
The actual location of the Recycle Bin depends on the type of operating system and file system. On older FAT file systems (typically Windows 98 and prior), it is located in Drive:\RECYCLED. In the NTFS filesystem (Windows 2000, XP, NT) it is Drive:\RECYCLER. On Windows Vista and Windows 7 it is Drive:\$Recycle.
upvoted 2 times
...
MarcoSenno
3 years, 3 months ago
Answer is C
upvoted 3 times
...
ad8421
3 years, 6 months ago
I look my vm xp sp2 in Drive:\RECYCLER, but my xp profession sp3 in Drive:\$Recycle.Bin so answer is ??
upvoted 1 times
...
Ripley522
3 years, 10 months ago
I mean, answer should be A. B is the wrong answer.
upvoted 1 times
...
Ripley522
3 years, 10 months ago
Page 347 of CHFI e-Book states: Each drive contains a folder to store deleted files; deleted items are stored in Drive:\$Recycle.Bin folder in Windows Vista and later versions of Windows. The older FAT file system, used across Windows 98 and earlier versions, stored the deleted files in Drive:\RECYCLED folder, whereas the Windows 2000, XP, and NT, which deploy NTFS file system, store these files in Drive:\RECYCLER folder. So answer should be B.
upvoted 4 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago