Welcome to ExamTopics
ExamTopics Logo
- Expert Verified, Online, Free.

Unlimited Access

Get Unlimited Contributor Access to the all ExamTopics Exams!
Take advantage of PDF Files for 1000+ Exams along with community discussions and pass IT Certification Exams Easily.

Exam GCED topic 1 question 7 discussion

Actual exam question from GIAC's GCED
Question #: 7
Topic #: 1
[All GCED Questions]

At the start of an investigation on a Windows system, the lead handler executes the following commands after inserting a USB drive. What is the purpose of this command? C:\ >dir / s / a dhsra d: \ > a: \ IRCD.txt

  • A. To create a file on the USB drive that contains a listing of the C: drive
  • B. To show hidden and archived files on the C: drive and copy them to the USB drive
  • C. To copy a forensic image of the local C: drive onto the USB drive
  • D. To compare a list of known good hashes on the USB drive to files on the local C: drive
Show Suggested Answer Hide Answer
Suggested Answer: C 🗳️
This command will create a text file on the collection media (in this case you would probably be using a USB flash drive) named IRCD.txt that should contain a recursive directory listing of all files on the desk.

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
EggyEd
3 years, 3 months ago
This command generates a directory listing and not a forensic copy. Anser A should be the correct one
upvoted 3 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...