Computer Hacking Forensic Investigator (CHFI) — Question 29

Annie is searching for certain deleted files on a system running Windows XP OS. Where will she find the files if they were not completely deleted from the system?

Answer options

• A. C: $Recycled.Bin
• B. C: \$Recycle.Bin
• C. C:\RECYCLER
• D. C:\$RECYCLER

Correct answer: B

Explanation

The correct location for partially deleted files on Windows XP is C:\$Recycle.Bin, as this is the specific directory used to store files that have been sent to the recycle bin. The other options either reference incorrect paths or variations that do not align with the file system structure of Windows XP.