Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

GIAC GCED Exam - Topic 7 Question 79 Discussion

At the start of an investigation on a Windows system, the lead handler executes the following commands after inserting a USB drive. What is the purpose of this command? C:\ >dir / s / a dhsra d: \ > a: \ IRCD.txt
C) To copy a forensic image of the local C: drive onto the USB drive
A) To create a file on the USB drive that contains a listing of the C: drive
B) To show hidden and archived files on the C: drive and copy them to the USB drive
D) To compare a list of known good hashes on the USB drive to files on the local C: drive

GIAC GCED Exam - Topic 7 Question 79 Discussion

Actual exam question for GIAC's GCED exam
Question #: 79
Topic #: 7
[All GCED Questions]

At the start of an investigation on a Windows system, the lead handler executes the following commands after inserting a USB drive. What is the purpose of this command? C:\ >dir / s / a dhsra d: \ > a: \ IRCD.txt

Show Suggested Answer Hide Answer
Suggested Answer: C

This command will create a text file on the collection media (in this case you would probably be using a USB flash drive) named IRCD.txt that should contain a recursive directory listing of all files on the desk.


by Benedict at May 28, 2026, 06:58 AM

Limited Time Offer

25%

Off

Get Premium GCED Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Bette
I don't think it's about copying a forensic image; that sounds too complex for just a dir command. It must be more about listing files or attributes.
upvoted 0 times
...
Cassie
5 days ago
I feel like option A makes sense because it mentions creating a file on the USB, but I’m not entirely confident about the specifics of the command.
upvoted 0 times
...
Kenia
10 days ago
I remember practicing a similar question where we had to identify commands that show hidden files. This seems like it could be related to that.
upvoted 0 times
...
Georgiann
15 days ago
I think the command is trying to list files, but I'm not sure if it's just for the C: drive or if it's also copying them to the USB.
upvoted 0 times
...

Save Cancel