nerdexam
GIAC

GCFE · Question #160

What forensic insights can be derived from analyzing 'archived files' on a system?

The correct answer is A. Insights into the data preservation habits of users, including backup practices and potentially. Exam Questions, Study Guides, Practice Tests. Lead the way to help you pass any IT Certification exams, 100% Pass Guaranteed or Full Refund. Especially Cisco, Microsoft, CompTIA, Citrix, EMC, HP, Oracle, VMware, Juniper, Check Point, LPI, Nortel, EXIN and so on. Our Slogan…

File System & Registry Forensics

Question

What forensic insights can be derived from analyzing 'archived files' on a system?

Options

  • AInsights into the data preservation habits of users, including backup practices and potentially
  • BDetails on the types of media streamed on the system.
  • CInformation about user interaction with the operating system's help features.
  • DLogs of user communication via internal messaging systems.

How the community answered

(42 responses)
  • A
    81% (34)
  • B
    5% (2)
  • C
    12% (5)
  • D
    2% (1)

Explanation

Exam Questions, Study Guides, Practice Tests. Lead the way to help you pass any IT Certification exams, 100% Pass Guaranteed or Full Refund. Especially Cisco, Microsoft, CompTIA, Citrix, EMC, HP, Oracle, VMware, Juniper, Check Point, LPI, Nortel, EXIN and so on. Our Slogan: First Test, First Pass. Help you to pass any IT Certification exams at the first try. You can reach us at any of the email addresses listed below. Any problems about IT certification or our products, you could rely upon us, we will give you satisfactory answers in 24 hours.

Topics

#archived files#data preservation#backup forensics#user behavior analysis

Community Discussion

No community discussion yet for this question.

Full GCFE Practice