GIAC
GCFE · Question #125
GCFE Question #125: Real Exam Question with Answer & Explanation
Sign in or unlock GCFE to reveal the answer and full explanation for question #125. The question stem and answer options stay visible for context.
Question
You are investigating suspicious emails sent from a company employee's account. The employee denies sending them. What forensic techniques would you use to investigate the authenticity of these emails? (Choose three)
Options
- AAnalyze SMTP headers
- BReview network error logs
- CExtract metadata from email attachments
- DExamine email drafts and outbox folders
- ECheck the user's login timestamps
Unlock GCFE to see the answer
You've previewed enough free GCFE questions. Unlock GCFE for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.