nerdexam
GIAC

GCFE · Question #35

Why is the analysis of 'user-specific event logs' significant in a forensic investigation?

The correct answer is A. They provide a record of events triggered by specific user actions, which can help link activities to. See the full explanation below for the reasoning.

Question

Why is the analysis of 'user-specific event logs' significant in a forensic investigation?

Options

  • AThey provide a record of events triggered by specific user actions, which can help link activities to
  • BThey monitor the frequency of network disconnections.
  • CThey log details of system firmware updates.
  • DThey track changes in user interface settings.

How the community answered

(38 responses)
  • A
    79% (30)
  • B
    11% (4)
  • C
    3% (1)
  • D
    8% (3)

Community Discussion

No community discussion yet for this question.

Full GCFE Practice