nerdexam
GIAC

GCFE · Question #87

During a forensic examination, how can log files from cloud storage applications be used to track user activity?

The correct answer is B. They provide a timeline of files accessed and modified. See the full explanation below for the reasoning.

Question

During a forensic examination, how can log files from cloud storage applications be used to track user activity?

Options

  • AThey can show the history of connected printers.
  • BThey provide a timeline of files accessed and modified.
  • CThey list installed browser extensions.
  • DThey detail changes to firewall settings.

How the community answered

(36 responses)
  • A
    11% (4)
  • B
    78% (28)
  • C
    3% (1)
  • D
    8% (3)

Community Discussion

No community discussion yet for this question.

Full GCFE Practice