QID:
927
Registry keys that track user’s activities can be found in the NTUSER.DAT file. When a user performs a particular action, the registry keys Lastwrite time is updated. These registry keys track the user’s activity and add or modify timestamp information associated with the Registry values, this timestamp information is maintained in the value data. Important dates are available in the contents of the binary data for the F value such as time/date stamps, represented as 64-bit FILETIME objects. Which of the following statement is correct for Bytes 24-31?
A: Represent the last login date for the account
B: Represent the date that the password was last reset
C: Represent the account expiration date
D: Represent the date of the last failed login attempt
Explanation:
