CiscoCisco
300-215 · Question #120
300-215 Question #120: Real Exam Question with Answer & Explanation
The correct answer is B: Task Scheduler Operational Log. The Task Scheduler Operational Log records task creation, execution, and modification- commonly abused for persistence.
Submitted by carter_n· Mar 6, 2026Forensics Techniques
Question
Which Windows artifact BEST helps identify persistence via scheduled tasks?
Options
- AAmcache.hve
- BTask Scheduler Operational Log
- CShimcache
- DJump Lists
Explanation
The Task Scheduler Operational Log records task creation, execution, and modification- commonly abused for persistence.
Topics
#Windows forensics#Scheduled tasks#Persistence#Artifact analysis
Community Discussion
No community discussion yet for this question.