Ace Your Exams with Our Notes and Mock Tests!

EC-Council: Computer Hacking Forensic Investigator(CHFI-V10)
Module 6 : Windows Forensics
Questions available : 94		You are not logged in. Please Login for track your learning progress

Q. No: 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 |
		Go to Question No.

Question No 0

---

If you want to share the link of this question, please click here to "Copy Question Link" and share that generated link. Link from URL may change in future.

 

---

Bookmark this Question		QID: 312
Gary is checking for the devices connected to USB ports of a suspect system during an investigation. Select the appropriate tool that will help him document all the connected devices.
A:    Devscan
B:    Devcon
C:    fsutil
D:    Reg.exe
Explanation: HBM Device Scan (devscan) interface allows automatic discovery and monitoring reachability of devices connected to the network. DevCon is a command-line tool that performs device management functions on local computers. DevCon tools can be used to document devices that are attached to a Windows system To list all existing devices in the specified device setup classes, use the following command devcon listclass <class> <port> Performs tasks that are related to file allocation table (FAT) and NTFS file systems, such as managing reparse points, managing sparse files, or dismounting a volume. If it‘s used without parameters, fsutil displays a list of supported subcommands. Reg is a Windows utility used to interact with the Windows Registry. It can be used at the command-line interface to query, add, modify, and remove information