Eccouncil Exam ECSAv10 Topic 2 Question 78 Discussion

Actual exam question for Eccouncil's ECSAv10 exam

Question #: 78
Topic #: 2

Harold is a security analyst who has just run the rdisk /s command to grab the backup SAM file on a computer.Where should Harold navigate on the computer to find the file?

A%systemroot%\LSA

B%systemroot%\repair

C%systemroot%\system32\drivers\etc

D%systemroot%\system32\LSA

Show Suggested Answer

Suggested Answer: D

by Haydee at Sep 11, 2024, 02:30 PM

Limited Time Offer

25%

Off

Get Premium ECSAv10 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Brittni

26 days ago

I'm stumped on this one. Maybe Harold should try the 'rdisk /s' command again, but this time with a sprinkle of fairy dust for good luck!

upvoted 0 times

...

Chandra

27 days ago

Ah, the old rdisk /s trick! Classic. I'm betting the file is in B) %systemroot%\\repair, where backups are usually stored.

upvoted 0 times

...

Shawn

29 days ago

Haha, I bet Harold wishes he had a magic wand to find that file. But seriously, I'm going with D) %systemroot%\\system32\\LSA.

upvoted 0 times

Evangelina

17 days ago

User1: I think it's A) %systemroot%\\LSA

upvoted 0 times

...

Rueben

1 months ago

Hmm, I'm not sure about this one. Is it possible the file is in the system32 folder? Let me think this through...

upvoted 0 times

Leonard

10 days ago

User1: I think the file might be in the system32 folder.

upvoted 0 times

...

Olen

2 months ago

I think the answer is B) %systemroot%\\repair. That seems like the logical place to find a backup file.

upvoted 0 times

Monroe

14 days ago

I'm not sure, but I think it might be A) %systemroot%\\LSA.

upvoted 0 times

...

Monroe

17 days ago

I disagree, I think the answer is D) %systemroot%\\system32\\LSA.

upvoted 0 times

...

Tula

2 months ago

I'm not sure, but I think the correct location is %systemroot%\\LSA.

upvoted 0 times

...

Willard

2 months ago

I believe the file can be found at %systemroot%\\system32\\LSA.

upvoted 0 times

...

Felicidad

2 months ago

I think Harold should navigate to %systemroot%\\system32\\drivers\\etc.

upvoted 0 times

...