EC-Council
312-49V9 · Question #302
What method of computer forensics will allow you to trace all ever-established user accounts on a Windows 2000 server the course of its lifetime?
Sign in or unlock 312-49V9 to reveal the answer and full explanation for question #302. The question stem and answer options stay visible for context.
Windows Forensics
Question
What method of computer forensics will allow you to trace all ever-established user accounts on a Windows 2000 server the course of its lifetime?
Options
- Aforensic duplication of hard drive
- Banalysis of volatile data
- Ccomparison of MD5 checksums
- Dreview of SIDs in the Registry
Unlock 312-49V9 to see the answer
You've previewed enough free 312-49V9 questions. Unlock 312-49V9 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#Windows Registry#Security Identifier#user account forensics#SID analysis