CompTIA CASP+ (CAS-004) — Question 262

A cyberanalyst has been tasked with recovering PDF files from a provided image file. Which of the following is the BEST file-carving tool for PDF recovery?

Answer options

• A. objdump
• B. Strings
• C. dd
• D. Foremost

Correct answer: D

Explanation

Foremost is designed specifically for file carving and can effectively recover various file types, including PDFs, from image files. objdump and dd are not intended for file recovery, and Strings is used for extracting human-readable strings from binary files, making them less suitable for this task.