GIAC Exam GCED Topic 9 Question 35 Discussion

Actual exam question for GIAC's GIAC Certified Enterprise Defender exam

Question #: 35
Topic #: 9

[All GIAC Certified Enterprise Defender Questions]

The creation of a filesystem timeline is associated with which objective?

AForensic analysis

BFirst response

CAccess control

DIncident eradication

Show Suggested Answer

Suggested Answer: A

by Gilma at Mar 22, 2024, 12:35 AM

Limited Time Offer

25%

Off

Get Premium GCED Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Tyra

11 days ago

I see your point, Janna. Having a filesystem timeline can definitely assist in incident response to identify the root cause.

upvoted 0 times

...

Janna

12 days ago

But isn't it also important for incident eradication?

upvoted 0 times

...

Kerrie

14 days ago

I agree with Tyra, it helps in tracking the sequence of events for investigation purposes.

upvoted 0 times

...

Tyra

18 days ago

I think the creation of a filesystem timeline is associated with forensic analysis.

upvoted 0 times

...

Carin

21 days ago

That's a good point, Lisandra. Having a filesystem timeline can definitely assist in eradicating an incident efficiently.

upvoted 0 times

...

Lisandra

22 days ago

I believe it could also be related to incident eradication, as it helps in understanding the sequence of events leading up to the incident.

upvoted 0 times

...

James

2 months ago

I agree with Carin. It helps in reconstructing events and identifying evidence in a forensic investigation.

upvoted 0 times

...

Carin

2 months ago

I think the creation of a filesystem timeline is associated with forensic analysis.

upvoted 0 times

...