Host-based Analysis (Windows)

What file system is used by Windows 11?

• FAT32

• NTFS

• MS-DOS

• HFS+

What is the purpose of the 'ren oldname newname' command in MS-DOS?

• Deletes one or more files

• Renames a file

• Changes the directory to the indicated directory

• Shows a listing of all the files

What is a key purpose of Windows Defender?

• To manage passwords

• To provide a suite of security features

• To organize files and folders

• To improve system performance

What should be done to ensure file security?

• Give everyone full access

• Set minimum necessary permissions

• Disable all permissions

• Share all files publicly

Which file system is not typically used for large partition sizes?

• NTFS

• FAT

• ExFAT

• HFS+

What is the purpose of the last 16 sectors in NTFS?

• To store user data

• To contain a copy of the boot sector

• To list installed applications

• To store system settings

What is the significance of the command "echo 'Alternate Data Here' > Testfile.txt:ADS"?

• It creates a new file

• It deletes a file

• It adds data to a stream

• It renames a file

What does the command "dir /r" display?

• Regular files only

• Hidden files only

• Files with alternate streams

• Encrypted files

Which registry key is used for configurations that apply to all users?

• HKEY_CURRENT_USER

• HKEY_LOCAL_MACHINE

• HKEY_CLASSES_ROOT

• HKEY_USERS

Which registry hive would you check for information about the current hardware profile?

• HKEY_CURRENT_USER (HKCU)

• HKEY_USERS (HKU)

• HKEY_CURRENT_CONFIG (HKCC)

• HKEY_CLASSES_ROOT (HKCR)