Computer Hacking Forensic Investigator (CHFI v10) — Question 160

What is an investigator looking for in the rp.log file stored in a system running on Windows 10 operating system?

Answer options

• A. Restore point interval
• B. Automatically created restore points
• C. System CheckPoints required for restoring
• D. Restore point functions

Correct answer: B

Explanation

The correct answer is B, as the rp.log file contains details about automatically created restore points, which are crucial for system recovery. Options A, C, and D do not provide the specific information related to the automatic creation of restore points, making them incorrect in this context.