GIAC
GCFE · Question #127
Which two artifacts are essential for tracking file access and modification times on a Windows system?
The correct answer is A. Master File Table (MFT) D. File metadata. See the full explanation below for the reasoning.
Question
Which two artifacts are essential for tracking file access and modification times on a Windows system?
Options
- AMaster File Table (MFT)
- BEvent Viewer
- CSecurity log
- DFile metadata
How the community answered
(32 responses)- A75% (24)
- B19% (6)
- C6% (2)
Community Discussion
No community discussion yet for this question.