GIAC

GCFE · Question #106

What is the significance of the Recycle Bin in forensic investigations of user activity?

The correct answer is B. It stores recently deleted files and their metadata. See the full explanation below for the reasoning.

Question

What is the significance of the Recycle Bin in forensic investigations of user activity?

Options

AIt logs system startup times
BIt stores recently deleted files and their metadata
CIt tracks changes to user profiles
DIt monitors software installations

How the community answered

(57 responses)

A
4% (2)
B
75% (43)
C
14% (8)
D
7% (4)

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion

Full GCFE Practice