GIAC Exam GCED Topic 9 Question 35 Discussion

Actual exam question for GIAC's GCED exam

Question #: 35
Topic #: 9

[All GCED Questions]

The creation of a filesystem timeline is associated with which objective?

AForensic analysis

BFirst response

CAccess control

DIncident eradication

Show Suggested Answer

Suggested Answer: A

by Gilma at Mar 22, 2024, 12:35 AM

Limited Time Offer

25%

Off

Get Premium GCED Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Tyra

12 months ago

I see your point, Janna. Having a filesystem timeline can definitely assist in incident response to identify the root cause.

upvoted 0 times

...

Janna

12 months ago

But isn't it also important for incident eradication?

upvoted 0 times

...

Kerrie

12 months ago

I agree with Tyra, it helps in tracking the sequence of events for investigation purposes.

upvoted 0 times

...

Tyra

1 years ago

I think the creation of a filesystem timeline is associated with forensic analysis.

upvoted 0 times

...

Carin

1 years ago

That's a good point, Lisandra. Having a filesystem timeline can definitely assist in eradicating an incident efficiently.

upvoted 0 times

...

Lisandra

1 years ago

I believe it could also be related to incident eradication, as it helps in understanding the sequence of events leading up to the incident.

upvoted 0 times

...

James

1 years ago

I agree with Carin. It helps in reconstructing events and identifying evidence in a forensic investigation.

upvoted 0 times

...

Carin

1 years ago

I think the creation of a filesystem timeline is associated with forensic analysis.

upvoted 0 times

...