Computer Hacking Forensic Investigator (CHFI v10) — Question 248

Charles has accidentally deleted an important file while working on his Mac computer. He wants to recover the deleted file as it contains some of his crucial business secrets. Which of the following tool will help Charles?

Answer options

• A. Xplico
• B. Colasoft's Capsa
• C. FileSalvage
• D. DriveSpy

Correct answer: C

Explanation

FileSalvage is specifically designed for file recovery on Mac systems, making it the best option for Charles to retrieve his deleted file. The other tools, such as Xplico and Colasoft's Capsa, are not focused on file recovery, and DriveSpy is related to monitoring disk activity rather than recovering lost files.