GIAC Forensics Examiner Practice Test - GCFE FREE EXAM DUMPS QUESTIONS & ANSWERS

A. Setup log B. Application log C. Forwarded Events log D. System log E. Security log

A. They provide a historical view of the system at various points, helping to identify changes over time. B. They track changes in user interface themes. C. They log user login attempts and durations. D. They detail the network security protocols in use.

A. They provide a historical view of the system, which can be useful for identifying changes made over time, including malware installation or unauthorized modifications. B. They log the installation of mobile apps. C. They monitor the performance of hardware components. D. They provide a backup of user emails.

A. $LogFile B. INFO2 or $I files C. Registry hive NTUSER.DAT D. Pagefile.sys

A. By examining unallocated disk space for remnants of deleted files B. By reviewing the file's access permissions C. By analyzing encrypted files D. By retrieving logs of failed login attempts

A. Files downloaded and their sources B. User account changes C. Installed applications D. Network topology

A. Session restore files B. Form history C. Index.dat D. Firewall logs

A. It provides data about external media connected. B. It shows changes in system security settings. C. It can reveal user preferences across devices. D. It includes information about system errors.

A. It tracks the frequency of password changes. B. It helps in establishing a chronological order of events based on the creation, modification, and access times of files and other digital artifacts. C. It provides a continuous log of system uptime and downtime. D. It details changes in system security settings.

A. Logs of user-generated system errors B. Details about user interface customizations C. Data on file access requests and changes made via applications D. Information on hardware configurations used