nerdexam
EC-Council

312-49 · Question #41

Shortcuts are the files with the extension .Ink that are created and are accessed by the users. These files provide you with information about:

The correct answer is A. Files or network shares. Windows shortcut files use the .lnk extension (often misread as '.Ink'). These are shell link files that act as pointers or references to target objects. A .lnk file stores metadata about its target, which can be a local file, folder, executable, or a network share (UNC path). Fo

Submitted by jordan8· Apr 18, 2026Disk Forensics

Question

Shortcuts are the files with the extension .Ink that are created and are accessed by the users. These files provide you with information about:

Options

  • AFiles or network shares
  • BRunning application
  • CApplication logs
  • DSystem logs

How the community answered

(44 responses)
  • A
    93% (41)
  • B
    2% (1)
  • C
    5% (2)

Explanation

Windows shortcut files use the .lnk extension (often misread as '.Ink'). These are shell link files that act as pointers or references to target objects. A .lnk file stores metadata about its target, which can be a local file, folder, executable, or a network share (UNC path). Forensically, .lnk files are valuable because they reveal information about files or network shares the user has accessed, even if the target has since been deleted or disconnected - making them a key artifact in digital forensics investigations.

Topics

#LNK files#Windows artifacts#User activity#File system analysis

Community Discussion

No community discussion yet for this question.

Full 312-49 Practice