Free GIAC GCFE Exam Dumps Questions & Answers

What is the forensic significance of analyzing the 'Prefetch' files in Windows?

• A.  They provide insights into the programs executed on the system, helping to determine user behavior.
• B.  They track changes in system security settings.
• C.  They monitor the installation of new hardware.
• D.  They log details of network configuration adjustments.

What forensic value does the 'Web Data' file in Chrome offer?

• A.  It includes details on saved passwords and autofill information.
• B.  It provides data on external devices connected to the system.
• C.  It lists all installed browser extensions.
• D.  It tracks changes to browser security settings.

What is the primary function of hashing in digital forensics?

• A.  To identify duplicate files
• B.  To verify the integrity of forensic evidence
• C.  To track user access times
• D.  To compress data for storage efficiency

Which artifacts are essential for identifying URLs that were typed manually by a user during a browsing session? (Choose Two)

• A.  Cache files
• B.  System log files
• C.  Autocomplete files
• D.  Form history

What does analyzing the 'registry hives' reveal in the context of system analysis?

• A.  It provides insights into user configurations and installed software, which can be crucial in understanding system usage patterns.
• B.  It tracks the installation of network adapters.
• C.  It logs user interactions with cloud storage services.
• D.  It details the frequency of password changes.