CompTIA
CAS-001 · Question #434
CAS-001 Question #434: Real Exam Question with Answer & Explanation
Sign in or unlock CAS-001 to reveal the answer and full explanation for question #434. The question stem and answer options stay visible for context.
Question
A forensic analyst receives a hard drive containing malware quarantined by the antivirus application. After creating an image and determining the directory location of the malware file, which of the following helps to determine when the system became infected?
Options
- AThe malware file's modify, access, change time properties.
- BThe timeline analysis of the file system.
- CThe time stamp of the malware in the swap file.
- DThe date/time stamp of the malware detection in the antivirus logs.
Unlock CAS-001 to see the answer
You've previewed enough free CAS-001 questions. Unlock CAS-001 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.