Computer Hacking Forensic Investigator (CHFI v10) — Question 50

Annie is searching for certain deleted files on a system running Windows XP OS. Where will she find the files if they were not completely deleted from the system?

Answer options

• A. C: $Recycled.Bin
• B. C: \$Recycle.Bin
• C. C:\RECYCLER
• D. C:\$RECYCLER

Correct answer: C

Explanation

The correct answer is C: C:\RECYCLER, which is the location where deleted files are stored in Windows XP if they are not fully erased. Options A and B refer to incorrect paths, while D is not applicable to the Windows XP structure for deleted files.