GIAC
GCFE · Question #37
GCFE Question #37: Real Exam Question with Answer & Explanation
The correct answer is A. They contain user-specific registry settings, offering insights into user configuration and behavior. See the full explanation below for the reasoning.
Question
How do 'NTUSER.DAT' files contribute to forensic investigations?
Options
- AThey contain user-specific registry settings, offering insights into user configuration and behavior
- BThey log the installation dates of applications.
- CThey track the user's email login data.
- DThey monitor the network throughput rates.
Community Discussion
No community discussion yet for this question.