nerdexam
GIAC

GCFE · Question #142

How does examining 'startup folder contents' help in forensic investigations?

The correct answer is A. It can reveal programs set to automatically start upon login, which might include malware or. See the full explanation below for the reasoning.

Question

How does examining 'startup folder contents' help in forensic investigations?

Options

  • AIt can reveal programs set to automatically start upon login, which might include malware or
  • BIt provides details on system backup schedules.
  • CIt logs changes to power management settings.
  • DIt tracks updates to the graphical user interface.

How the community answered

(23 responses)
  • A
    70% (16)
  • B
    17% (4)
  • C
    4% (1)
  • D
    9% (2)

Community Discussion

No community discussion yet for this question.

Full GCFE Practice