GCFE 無料問題集「GIAC Forensics Examiner Practice Test」

（A）SAM

（B）SECURITY

（C）SYSTEM

（D）NTUSER.DAT

（A）Metadata files

（B）User profile databases

（C）Configuration files

（D）Sync logs

（A）They log details of network configuration adjustments.

（B）They monitor the installation of new hardware.

（C）They provide insights into the programs executed on the system, helping to determine user behavior.

（D）They track changes in system security settings.

（A）User profile databases

（B）Trash or recycle bin

（C）Version history

（D）Configuration files

（E）Sync logs

（A）It monitors software installations

（B）It tracks changes to user profiles

（C）It stores recently deleted files and their metadata

（D）It logs system startup times

（A）WebCacheV01.dat

（B）Cookies.sqlite

（C）Favicons.db

（D）History.db

（A）By monitoring the efficiency of the system cooling components.

（B）By tracking the installation of third-party software.

（C）By identifying patterns in data that deviate from normal behavior, suggesting potential security incidents or malicious activity.

（D）By logging the updates to user profiles and settings.

（A）Metadata files

（B）User profile databases

（C）Configuration files

（D）Sync logs