nerdexam
EC-CouncilEC-Council

312-49 · Question #595

312-49 Question #595: Real Exam Question with Answer & Explanation

Sign in or unlock 312-49 to reveal the answer and full explanation for question #595. The question stem and answer options stay visible for context.

Submitted by cyberguy42· Apr 18, 2026Disk Forensics

Question

Smith, an employee of a reputed forensic investigation firm, has been hired by a private organization to investigate a laptop that is suspected to be involved in the hacking of the organization's DC server. Smith wants to find all the values typed into the Run box in the Start menu. Which of the following registry keys will Smith check to find the above information?

Options

  • ATypedURLs key
  • BMountedDevices key
  • CUserAssist Key
  • DRunMRU key

Unlock 312-49 to see the answer

You've previewed enough free 312-49 questions. Unlock 312-49 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Topics

#Windows Registry#Forensic Artifacts#Run Box History#Digital Forensics
Full 312-49 PracticeBrowse All 312-49 Questions