GIAC Exam GCED Topic 7 Question 37 Discussion

Actual exam question for GIAC's GCED exam

Question #: 37
Topic #: 7

[All GCED Questions]

The creation of a filesystem timeline is associated with which objective?

AForensic analysis

BFirst response

CAccess control

DIncident eradication

Show Suggested Answer

Suggested Answer: A

by Andra at Apr 21, 2024, 09:56 PM

Limited Time Offer

25%

Off

Get Premium GCED Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Christiane

6 months ago

I think it could also be linked to incident eradication, as it helps in understanding the extent of the breach.

upvoted 0 times

...

Lashaunda

7 months ago

That's a good point, Having a filesystem timeline can aid in both forensic analysis and first response.

upvoted 0 times

...

Aron

7 months ago

But couldn't it also be useful for first response to quickly identify any suspicious activity?

upvoted 0 times

...

Pa

7 months ago

I agree with it helps in reconstructing events during forensic analysis.

upvoted 0 times

...

Lashaunda

7 months ago

I think the creation of a filesystem timeline is associated with forensic analysis.

upvoted 0 times

...

Micheline

8 months ago

Got it, thanks for clarifying.

upvoted 0 times

...

An

8 months ago

Yes, exactly. It helps in forensic analysis.

upvoted 0 times

...

Sherrell

8 months ago

So, it is related to analyzing data for investigations?

upvoted 0 times

...

Irma

8 months ago

A) Forensic analysis

upvoted 0 times

...

Micheline

8 months ago

What is the main objective of creating a filesystem timeline?

upvoted 0 times

...