Computer Hacking Forensic Investigator (CHFI v10) — Question 149

Which of the following Registry components include offsets to other cells as well as the LastWrite time for the key?

Answer options

• A. Value list cell
• B. Value cell
• C. Key cell
• D. Security descriptor cell

Correct answer: C

Explanation

The Key cell is the correct answer as it holds offsets to other cells and the LastWrite time, which are essential for managing the structure of the Registry. The Value list cell and Value cell do not contain this offset information, and the Security descriptor cell is related to permissions rather than key metadata.