GIAC Certified Firewall Analyst GCFW Question # 59 Topic 6 Discussion

GIAC Certified Firewall Analyst GCFW Question # 59 Topic 6 Discussion

GCFW Exam Topic 6 Question 59 Discussion:
Question #: 59
Topic #: 6

Adam works as a professional Computer Hacking Forensic Investigator. A project has been assigned to him to investigate computer of an unfaithful employee of SecureEnet Inc. Suspect's computer runs on Windows operating system. Which of the following sources will Adam investigate on a Windows host to collect the electronic evidences?

Each correct answer represents a complete solution. Choose all that apply.


A.

Allocated cluster


B.

Swap files


C.

Unused and hidden partition


D.

Slack spaces


Get Premium GCFW Questions

Contribute your Thoughts:


Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.