GIAC
GCFE · Question #40
During a forensic investigation, which cloud storage artifact is most useful for identifying a file's origin and version history?
The correct answer is C. Version history files. See the full explanation below for the reasoning.
Question
During a forensic investigation, which cloud storage artifact is most useful for identifying a file's origin and version history?
Options
- AApplication error logs
- BSync logs
- CVersion history files
- DPrefetch files
How the community answered
(16 responses)- A13% (2)
- C81% (13)
- D6% (1)
Community Discussion
No community discussion yet for this question.