Cisco
300-215 · Question #120
Which Windows artifact BEST helps identify persistence via scheduled tasks?
The correct answer is B. Task Scheduler Operational Log. The Task Scheduler Operational Log records task creation, execution, and modification- commonly abused for persistence.
Submitted by carter_n· Mar 6, 2026Forensics Techniques
Question
Which Windows artifact BEST helps identify persistence via scheduled tasks?
Options
- AAmcache.hve
- BTask Scheduler Operational Log
- CShimcache
- DJump Lists
How the community answered
(24 responses)- B88% (21)
- C4% (1)
- D8% (2)
Explanation
The Task Scheduler Operational Log records task creation, execution, and modification- commonly abused for persistence.
Topics
#Windows forensics#Scheduled tasks#Persistence#Artifact analysis
Community Discussion
No community discussion yet for this question.