GCFE 試験問題を無料オンラインアクセス

Which of the following is a primary forensic artifact found in web browsers that can help in identifying user activities?

• A.System logs
• B.Browser cache
• C.Firewall settings
• D.Kernel modules

You are investigating a case of data theft from a corporate server. The suspect accessed the server using a shared account. Which forensic techniques should you use to prove the suspect's involvement? (Choose three)

• A.Examine USB device connection logs
• B.Review NTFS permissions on the server
• C.Analyze server log files
• D.Compare hash values of critical files
• E.Track software installation times

When performing forensic analysis on Mozilla Firefox, which file is primarily analyzed to understand user search and form history? (Choose Two)

• A.places.sqlite
• B.prefs.js
• C.downloads.sqlite
• D.formhistory.sqlite

What can be inferred from the analysis of 'executable files' in a digital forensic investigation?
(Choose Two)

• A.User preferences for file viewing options
• B.Potential sources of malware and their behaviors
• C.System's operational efficiency and speed
• D.Software installation sources and dates

What is the forensic significance of analyzing the 'Prefetch' files in Windows?

• A.They track changes in system security settings.
• B.They monitor the installation of new hardware.
• C.They log details of network configuration adjustments.
• D.They provide insights into the programs executed on the system, helping to determine user behavior.