nerdexam
EC-Council

312-49V11 · Question #134

Investigator Janet comes across a suspicious Windows registry key during a computer hacking forensic investigation. She believes modifying this key is associated with the recent cyberattack on the…

Sign in or unlock 312-49V11 to reveal the answer and full explanation for question #134. The question stem and answer options stay visible for context.

Windows Forensics

Question

Investigator Janet comes across a suspicious Windows registry key during a computer hacking forensic investigation. She believes modifying this key is associated with the recent cyberattack on the company's servers. In order to confirm this, Janet needs to reference a timestamp embedded inside the registry key. What is the correct name of this timestamp?

Options

  • ALast Write Time
  • BUser Activity Time
  • CSystem Modification Time
  • DCurrent System Time

Unlock 312-49V11 to see the answer

You've previewed enough free 312-49V11 questions. Unlock 312-49V11 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Topics

#Windows registry#Last Write Time#registry forensics#timestamp analysis
Full 312-49V11 Practice