GIAC
GCFE · Question #118
Why is the 'Last Known Good Configuration' data important in forensic analysis of Windows systems?
The correct answer is A. It contains information about the last system state that booted successfully without errors, which. See the full explanation below for the reasoning.
Question
Why is the 'Last Known Good Configuration' data important in forensic analysis of Windows systems?
Options
- AIt contains information about the last system state that booted successfully without errors, which
- BIt logs details of deleted files.
- CIt monitors the installation of software updates.
- DIt provides data on network connectivity issues.
How the community answered
(27 responses)- A70% (19)
- B19% (5)
- C4% (1)
- D7% (2)
Community Discussion
No community discussion yet for this question.