MENU
What method of computer forensics will allow you to trace all ever-established user accounts on a Windows 2000 sever the course of its lifetime?
Suggested Answer: C
Get Premium 312-49 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
24 comments · newest first
ME
Melissia
I feel like B is too limited. Volatile data doesn’t cover everything.
RE
Ressie
5 days ago
A could work too, but it’s not as specific for user accounts.
KR
Krissy
10 days ago
I agree, D makes sense. It’s thorough for tracking accounts.
AL
Aleisha
15 days ago
I think D is the best choice. SIDs in the Registry show all user accounts.
DY
Dyan
20 days ago
D is definitely the way to go. It gives a complete history of accounts.
AL
Alida
26 days ago
C is interesting, but it’s more about data integrity, not user accounts.
LU
Luann
1 month ago
I feel like B is too limited. Volatile data doesn’t cover everything.
MO
Moon
1 month ago
A could work too, but it’s not as specific as D.
EL
Elly
1 month ago
I agree, D makes sense. It’s thorough for tracking accounts.
ST
Stacey
2 months ago
I think D is the best choice. SIDs in the Registry show all user accounts.
SA
Sage
2 months ago
I thought Windows 2000 was outdated for this stuff!
SH
Shonda
2 months ago
A) forensic duplication could also help, right?
JU
Julio
2 months ago
Wait, are we sure that’s the only method?
ME
Merilyn
2 months ago
Totally agree, that's the way to go!
DA
Danica
2 months ago
Gotta be D) review of SIDs in the Registry.
HE
Heike
3 months ago
Not sure if that’s enough info, sounds too simple.
DA
Dana
3 months ago
Totally agree with D, it’s the best way to track user accounts.
RO
Rodrigo
3 months ago
Wait, can you really trace all accounts just from the Registry?
KA
Karrie
3 months ago
I think A is more reliable for a full picture.
FA
Fausto
3 months ago
Gotta go with D, reviewing SIDs is key!
MA
Margot
3 months ago
I keep getting confused between SIDs and checksums; I think SIDs are the way to go for user accounts, but I need to double-check that.
SA
Sabra
4 months ago
I practiced a similar question, and I feel like volatile data analysis is more about current sessions rather than historical accounts.
ED
Eden
4 months ago
I’m not entirely sure, but I remember something about forensic duplication being more about data recovery than tracing accounts.
PE
Pete
5 months ago
I think the answer might be D, reviewing SIDs in the Registry, since SIDs are tied to user accounts.