New Year Sale 2026! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

GIAC GCFA Exam - Topic 4 Question 43 Discussion

Actual exam question for GIAC's GCFA exam
Question #: 43
Topic #: 4
[All GCFA Questions]

On which of the following locations does the Windows NT/2000 operating system contain the SAM, SAM.LOG, SECURITY.LOG, APPLICATION.LOG, and EVENT.LOG files?

Show Suggested Answer Hide Answer
Suggested Answer: A, B

Contribute your Thoughts:

0/2000 characters
Chantay
3 months ago
100% agree with C, that's where the config files are!
upvoted 0 times
...
Floyd
3 months ago
Wait, are you sure it's not in help? That seems odd.
upvoted 0 times
...
Dion
3 months ago
No way, I always thought it was in profiles!
upvoted 0 times
...
Tien
4 months ago
I thought it was A at first, but C makes more sense.
upvoted 0 times
...
Moira
4 months ago
It's definitely C, %Systemroot%system32config.
upvoted 0 times
...
Jenifer
4 months ago
I’m uncertain, but I think the SAM files are definitely not in the help directory. Maybe I should go with C?
upvoted 0 times
...
Agustin
4 months ago
I feel like I might confuse the locations, but I think the logs are not in the profiles or help folders.
upvoted 0 times
...
Lucy
4 months ago
I remember practicing a similar question, and I believe the correct answer is C, %Systemroot%system32config.
upvoted 0 times
...
Shay
5 months ago
I think the SAM and related files are usually in the system32config directory, but I'm not completely sure.
upvoted 0 times
...
Carole
5 months ago
I think the key here is to remember that those are all system-level files, so the answer is most likely going to be somewhere in the system32 directory or a subdirectory of that.
upvoted 0 times
...
Wava
5 months ago
I'm a bit confused on this one. I'm not entirely sure where those specific files are located in the Windows directory structure.
upvoted 0 times
...
Phuong
5 months ago
I'm pretty confident the answer is C. The system32\config directory is where I'd expect to find those system log files.
upvoted 0 times
...
Alex
5 months ago
Okay, let's see. I know the SAM file is the Security Accounts Manager, so that's probably in the system32 directory. But the other logs, I'm not so sure.
upvoted 0 times
...
Carmelina
5 months ago
Hmm, this looks like a tricky one. I'll need to think carefully about where Windows stores those important system files.
upvoted 0 times
...
Rosendo
5 months ago
Hmm, I'm a bit confused on this one. I know the layout files are usually named after the activity, but I can't remember the exact format. I'll have to think this through carefully.
upvoted 0 times
...
Hillary
5 months ago
I've got this! The answer is definitely "debug H.323 messages". That's the command we used in the lab to see all the H.323 signaling traffic, including media and call setup.
upvoted 0 times
...
Glenn
5 months ago
Okay, I've got this. When an application driver loads successfully, Windows records an "Information" event in the event log. That's one of the standard event types used to log normal, expected system activity.
upvoted 0 times
...
Samuel
9 months ago
If I had a nickel for every time I had to find those pesky log files, I'd be a millionaire. Where's my coffee?
upvoted 0 times
...
Mabel
9 months ago
I bet the answer is hidden in the depths of the Event Viewer. Time to do some serious log-diving!
upvoted 0 times
Darrel
8 months ago
That makes sense. Let's check there first.
upvoted 0 times
...
Vivienne
8 months ago
I think it's C) \%Systemroot%system32config.
upvoted 0 times
...
Luis
8 months ago
C) \%Systemroot%system32config
upvoted 0 times
...
Arminda
9 months ago
A) \%Systemroot%system32
upvoted 0 times
...
...
Omega
10 months ago
Hold on, I think I remember reading something about these files being in \%Systemroot%system32config. Let me double-check that.
upvoted 0 times
Merri
9 months ago
Nakita: Let me double-check to be sure.
upvoted 0 times
...
Nakita
9 months ago
User 2: Are you sure? I thought they were in \%Systemroot%system32.
upvoted 0 times
...
Ocie
9 months ago
User 1: I think you're right, those files are in \%Systemroot%system32config.
upvoted 0 times
...
...
Ettie
10 months ago
No way, it's definitely \%Systemroot%system32. That's the core of the operating system, where all the system files are located.
upvoted 0 times
...
Carmelina
10 months ago
Hmm, I'm not so sure about that. I think it might be \%Systemroot%profiles, that's where all the user profiles are stored, right?
upvoted 0 times
Shawnda
9 months ago
No, it's actually C) \%Systemroot%system32config where those files are located.
upvoted 0 times
...
Mila
9 months ago
C) \%Systemroot%system32config
upvoted 0 times
...
Jenifer
9 months ago
A) \%Systemroot%system32
upvoted 0 times
...
...
Luis
10 months ago
I'm pretty sure it's \%Systemroot%system32config, that's where all the important system files are stored.
upvoted 0 times
Maricela
9 months ago
D) \%Systemroot%help
upvoted 0 times
...
Paola
10 months ago
C) \%Systemroot%system32config
upvoted 0 times
...
Rolf
10 months ago
B) \%Systemroot%profiles
upvoted 0 times
...
Theron
10 months ago
A) \%Systemroot%system32
upvoted 0 times
...
...
Rebecka
10 months ago
I'm not sure, but I'll go with C) as well based on what Cristen and Walker said.
upvoted 0 times
...
Walker
10 months ago
I agree with Cristen, because those files are usually located in the config folder.
upvoted 0 times
...
Cristen
11 months ago
I think the answer is C) \%Systemroot%system32config.
upvoted 0 times
...
Jolanda
11 months ago
I'm not sure, but I'll go with C) \%Systemroot%system32config too based on what Thaddeus and Paris said.
upvoted 0 times
...
Paris
11 months ago
I agree with Thaddeus, C) \%Systemroot%system32config makes sense for those system files.
upvoted 0 times
...
Thaddeus
11 months ago
I think the answer is C) \%Systemroot%system32config because that's where the operating system usually stores those files.
upvoted 0 times
...

Save Cancel