nerdexam
GIAC

GCFE · Question #31

Why is it important to analyze the 'Recycle Bin' contents in a forensic context?

The correct answer is A. It can reveal files that were attempted to be deleted, which might contain relevant evidence. See the full explanation below for the reasoning.

Question

Why is it important to analyze the 'Recycle Bin' contents in a forensic context?

Options

  • AIt can reveal files that were attempted to be deleted, which might contain relevant evidence.
  • BIt provides details on user-scheduled tasks.
  • CIt lists all external devices connected at the time of deletion.
  • DIt tracks changes in system time and date settings.

How the community answered

(28 responses)
  • A
    75% (21)
  • B
    14% (4)
  • C
    4% (1)
  • D
    7% (2)

Community Discussion

No community discussion yet for this question.

Full GCFE Practice