GIAC Certified Forensic Examiner
Domain 6Objective 1
User Artifact Analysis GCFE Practice Questions (Page 9)
Part of the User and Cloud Artifacts domain, which makes up ~29% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~20–35 in this domain), expect 7–12 from this objective — we provide 45 practice questions to prepare you well beyond it. (estimate)
45questions here
9free pages
9concepts
Questions 41–45
- 41
Which browser artifact is used to store small pieces of data sent by websites to remember user preferences or session information?
Select an answer first - 42
A user is suspected of downloading prohibited content using Firefox. Which Firefox artifact would provide the most direct evidence of the downloaded files and their source URLs?
Select an answer first - 43
Which cloud storage service creates a folder in the user profile that synchronizes files to the cloud and leaves local artifacts?
Select an answer first - 44
In a Windows user profile, which file contains the user's registry settings and is a key artifact for user activity?
Select an answer first - 45
Which NTFS artifact contains metadata for every file and directory on a volume, including timestamps and file attributes?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
No more pagesBack to GCFE
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCFE” is a trademark of its owner, used for identification only.