Computer Hacking Forensic Investigator (CHFI v10) — Question 199

Pagefile.sys is a virtual memory file used to expand the physical memory of a computer. Select the registry path for the page file:

Answer options

• A. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management
• B. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\System Management
• C. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Device Management
• D. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management\PrefetchParameters

Correct answer: A

Explanation

The correct answer, A, points to the registry path that specifically handles memory management, including the configuration of virtual memory. Options B and C refer to incorrect paths that are not associated with memory management. Option D, while related, is more specific and includes additional parameters that are not necessary for locating the page file configuration.