GIAC

GCFE · Question #37

How do 'NTUSER.DAT' files contribute to forensic investigations?

The correct answer is A. They contain user-specific registry settings, offering insights into user configuration and behavior. See the full explanation below for the reasoning.

Question

How do 'NTUSER.DAT' files contribute to forensic investigations?

Options

AThey contain user-specific registry settings, offering insights into user configuration and behavior
BThey log the installation dates of applications.
CThey track the user's email login data.
DThey monitor the network throughput rates.

How the community answered

(17 responses)

A
82% (14)
C
6% (1)
D
12% (2)

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion

Full GCFE Practice