nerdexam
EC-Council

312-49 · Question #651

An investigator has extracted the device descriptor for a 1GB thumb drive that looks like: Disk&Ven_Best_Buy&Prod_Geek_Squad_U3&Rev_6.15. What does the "Geek_Squad" part represent?

The correct answer is A. Product description. Windows USB device descriptors follow a structured format: 'Ven_' identifies the vendor/manufacturer, 'Prod_' identifies the product name, and 'Rev_' identifies the revision/firmware version. In the string Disk&Ven_Best_Buy&Prod_Geek_Squad_U3&Rev_6.15, 'Best_Buy' is the vendor (m

Submitted by kev92· Apr 18, 2026Disk Forensics

Question

An investigator has extracted the device descriptor for a 1GB thumb drive that looks like:

Disk&Ven_Best_Buy&Prod_Geek_Squad_U3&Rev_6.15. What does the "Geek_Squad" part represent?

Options

  • AProduct description
  • BManufacturer Details
  • CDeveloper description
  • DSoftware or OS used

How the community answered

(25 responses)
  • A
    92% (23)
  • B
    4% (1)
  • D
    4% (1)

Explanation

Windows USB device descriptors follow a structured format: 'Ven_' identifies the vendor/manufacturer, 'Prod_' identifies the product name, and 'Rev_' identifies the revision/firmware version. In the string Disk&Ven_Best_Buy&Prod_Geek_Squad_U3&Rev_6.15, 'Best_Buy' is the vendor (manufacturer), 'Geek_Squad_U3' is the product name (with 'Geek_Squad' being part of the product description), and '6.15' is the revision. Therefore, 'Geek_Squad' is part of the product description, making option A correct.

Topics

#USB Forensics#Device Descriptors#Digital Evidence Identification#Storage Devices

Community Discussion

No community discussion yet for this question.

Full 312-49 Practice