A disavow file tells Google to ignore specific backlinks pointing to your site. It is a last-resort tool for toxic links you cannot get removed.
Disavowing asks Google not to count certain links when assessing your site — useful against spammy or negative-SEO links.
No — Google usually ignores obvious spam automatically.
After a manual action or clear negative-SEO attack.