GIAC
GCFE · Question #137
What role does the Master File Table (MFT) play in the forensic analysis of NTFS filesystems?
The correct answer is B. It contains metadata for each file and directory. See the full explanation below for the reasoning.
Question
What role does the Master File Table (MFT) play in the forensic analysis of NTFS filesystems?
Options
- AIt logs user login attempts and times.
- BIt contains metadata for each file and directory.
- CIt tracks changes to firewall settings.
- DIt details software installation processes.
How the community answered
(29 responses)- A7% (2)
- B79% (23)
- C10% (3)
- D3% (1)
Community Discussion
No community discussion yet for this question.