GIAC
GCFE · Question #4
How do forensic analysts use the information from 'system snapshots' in their investigations?
The correct answer is A. They provide a historical view of the system, which can be useful for identifying changes made. See the full explanation below for the reasoning.
Question
How do forensic analysts use the information from 'system snapshots' in their investigations?
Options
- AThey provide a historical view of the system, which can be useful for identifying changes made
- BThey monitor the performance of hardware components.
- CThey log the installation of mobile apps.
- DThey provide a backup of user emails.
How the community answered
(45 responses)- A78% (35)
- B4% (2)
- C11% (5)
- D7% (3)
Community Discussion
No community discussion yet for this question.