最新的GIAC Forensics Examiner Practice Test - GCFE免費考試真題
Which browser artifacts are essential for identifying cookies and tracking user login sessions?
(Choose Two)
(Choose Two)
正確答案: B,E
Which Windows artifact stores details about USB devices that were plugged into a system?
正確答案: A
In the context of digital forensics, why is it important to examine the 'Recent Documents' list?
正確答案: D
Which Windows log is typically used to track application crashes or failures?
正確答案: B
Which artifact is typically used to determine application execution on Windows?
正確答案: C
Which artifact is particularly valuable for determining the source of a malware infection in program analysis? (Choose Two)
正確答案: B,D
How can an analyst use 'security logs' to detect unauthorized access attempts?
正確答案: B
Which two of the following methods are commonly used to ensure the authenticity of digital evidence?
正確答案: B,C
How can an analyst use 'DNS logs' from Windows event logs to track malicious activity?
正確答案: D
You are investigating a case of data theft from a corporate server. The suspect accessed the server using a shared account. Which forensic techniques should you use to prove the suspect's involvement? (Choose three)
正確答案: A,C,D
Why is it important to analyze the 'Outbox' and 'Drafts' folders in an email forensic investigation?
正確答案: A
Which timeline artifact records the time files were created, accessed, modified and changed?
正確答案: B