ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 23 - ECSS discussion

Report
Export

Harry, a security professional, was hired to identify the details of an attack that was initiated on a Windows system. In this process, Harry decided to check the logs of currently running applications and the information related to previously uninstalled or removed applications for suspicious events.

Which of the following folders in a Windows system stores information on applications run on the system?

A.

C:\Windows\debug

Answers
A.

C:\Windows\debug

B.

C:\Windows\Book

Answers
B.

C:\Windows\Book

C.

C:\subdir

Answers
C.

C:\subdir

D.

C:\Windows\Prefelch

Answers
D.

C:\Windows\Prefelch

Suggested answer: D

Explanation:

The Prefetch folder in Windows is used to store information about applications that are run on the system. This data helps in optimizing the loading times of applications. The correct path is typicallyC:\Windows\Prefetch, notC:\Windows\Prefelchas listed in the options.It's important to note that while the Prefetch folder does contain logs that can be useful for understanding application behavior, it does not store logs for currently running applications or details about previously uninstalled applications1.

asked 24/10/2024
jing xue
37 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first