GIAC
GCFA · Question #72
GCFA Question #72: Real Exam Question with Answer & Explanation
Sign in or unlock GCFA to reveal the answer and full explanation for question #72. The question stem and answer options stay visible for context.
Question
Adam works as a professional Computer Hacking Forensic Investigator. He has been assigned with the project of investigating an iPod, which is suspected to contain some explicit material. Adam wants to connect the compromised iPod to his system, which is running on Windows XP (SP2) operating system. He doubts that connecting the iPod with his computer may change some evidences and settings in the iPod. He wants to set the iPod to read-only mode. This can be done by changing the registry key within the Windows XP (SP2) operating system. Which of the following registry keys will Adam change to accomplish the task?
Options
- AHKEY_LOCAL_MACHINE\System\CurrentControlset\Control\StorageDevicePolicies
- BHKEY_LOCAL_MACHINE\CurrentControlset\Control\StorageDevicePolicies
- CHKEY_LOCAL_MACHINE\System\CurrentControlset\StorageDevicePolicies
- DHKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion
Unlock GCFA to see the answer
You've previewed enough free GCFA questions. Unlock GCFA for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.