ECCouncil Computer Hacking Forensic Investigator (CHFI-v10) 312-49v10 Question # 166 Topic 17 Discussion

ECCouncil Computer Hacking Forensic Investigator (CHFI-v10) 312-49v10 Question # 166 Topic 17 Discussion

312-49v10 Exam Topic 17 Question 166 Discussion:
Question #: 166
Topic #: 17

When investigating a Windows System, it is important to view the contents of the page or swap file because:


A.

Windows stores all of the systems configuration information in this file


B.

This is file that windows use to communicate directly with Registry


C.

A Large volume of data can exist within the swap file of which the computer user has no knowledge


D.

This is the file that windows use to store the history of the last 100 commands that were run from the command line


Get Premium 312-49v10 Questions

Contribute your Thoughts:


Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.