GIAC
GCFE · Question #137
GCFE Question #137: Real Exam Question with Answer & Explanation
The correct answer is B. It contains metadata for each file and directory.. See the full explanation below for the reasoning.
Question
What role does the Master File Table (MFT) play in the forensic analysis of NTFS filesystems?
Options
- AIt logs user login attempts and times.
- BIt contains metadata for each file and directory.
- CIt tracks changes to firewall settings.
- DIt details software installation processes.
Community Discussion
No community discussion yet for this question.