GIAC

GCFE · Question #151

What is the forensic value of analyzing the 'Windows Event Viewer' in the context of system analysis?

The correct answer is A. It provides a detailed record of system, application, and security events, which can help trace. See the full explanation below for the reasoning.

Question

What is the forensic value of analyzing the 'Windows Event Viewer' in the context of system analysis?

Options

AIt provides a detailed record of system, application, and security events, which can help trace
BIt tracks the installation of new operating systems.
CIt monitors changes to the graphical user interface settings.
DIt logs the frequency of network disconnections.

How the community answered

(63 responses)

A
84% (53)
B
10% (6)
C
2% (1)
D
5% (3)

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion

Full GCFE Practice