The most common approach to salvaging deleted data on Macintosh systems is to:
A) Use EnCase to recover the files.
B) Use the Catalog utility.
C) Use file carving techniques.
D) There is currently no solution to recovering deleted files from a Macintosh.

Question

Quizplus · Accepted Answer

File carving techniques are commonly used for recovering deleted data on various systems, including Macintosh. These techniques do not rely on the file system structure but rather on the content of the files themselves, making them effective for data recovery even when file system metadata is not available or has been damaged.

The Most Common Approach to Salvaging Deleted Data on Macintosh