312-49 Question #493: Real Exam Question with Answer & Explanation

The correct answer is C: fsutil. The fsutil command-line utility in Windows provides low-level file system management, including controlling NTFS last access time updates. The specific commands are: 'fsutil behavior set disablelastaccess 0' (enable last access timestamps) and 'fsutil behavior set disablelastacce

Submitted by tom_us· Apr 18, 2026Disk Forensics

Question

Which of the following options will help users to enable or disable the last access time on a system running Windows 10 OS?

Options

Awmic service
BReg.exe
Cfsutil
DDevcon

Explanation

The fsutil command-line utility in Windows provides low-level file system management, including controlling NTFS last access time updates. The specific commands are: 'fsutil behavior set disablelastaccess 0' (enable last access timestamps) and 'fsutil behavior set disablelastaccess 1' (disable them). This timestamp is forensically significant. wmic service manages Windows services, Reg.exe manipulates registry keys directly, and Devcon is a device console tool for hardware management â€” none of these control NTFS timestamp behavior.

Topics

#Windows OS#File System Metadata#Last Access Time#fsutil

Community Discussion

No community discussion yet for this question.

Full 312-49 Practice Browse All 312-49 Questions