GIAC
GCFE · Question #127
GCFE Question #127: Real Exam Question with Answer & Explanation
The correct answer is A. Master File Table (MFT) D. File metadata. See the full explanation below for the reasoning.
Question
Which two artifacts are essential for tracking file access and modification times on a Windows system?
Options
- AMaster File Table (MFT)
- BEvent Viewer
- CSecurity log
- DFile metadata
Community Discussion
No community discussion yet for this question.