Exam 312-49v11 Topic 4 Question 342 Discussion

Actual exam question for EC-COUNCIL's 312-49v11 exam
Question #: 342
Topic #: 4
Which of the following files contains the traces of the applications installed, run, or uninstalled from a system?

Suggested Answer: D Vote an answer

by L at May 29, 2025, 11:50 AM

Limited Time Offer

15%

Off

Get Premium 312-49v11 Questions as Interactive Self Test Engine or PDF

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Nick name: Submit Cancel
qym
2025-07-27 07:05:23
Selected Answer: C
Answer is Prefetch Files. Source: Module 06 - Prefetch Files
upvoted 1 times
...
L
2025-05-29 11:51:45
Selected Answer: C
Prefetch files are created by Windows operating systems to speed up application startup. They also serve as a forensic goldmine because they store traces of:
Applications that have been executed
The first time they were run
The last time they were run
How many times they were run
Paths to the executables and associated files
upvoted 1 times
...
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
0
0
0
10