GIAC

GCFE · Question #113

What does the $MFT primarily track on NTFS systems?

The correct answer is C. Metadata for every file. See the full explanation below for the reasoning.

Question

What does the $MFT primarily track on NTFS systems?

Options

AFile slack space only
BDeleted registry keys
CMetadata for every file
DBrowser download history

How the community answered

(39 responses)

A
5% (2)
B
3% (1)
C
82% (32)
D
10% (4)

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion

Full GCFE Practice