Computer Hacking Forensic Investigator (CHFI v10) — Question 234

Which of the following data structures stores attributes of a process, as well as pointers to other attributes and data structures?

Answer options

• A. Lsproc
• B. DumpChk
• C. RegEdit
• D. EProcess

Correct answer: D

Explanation

The correct answer is D, EProcess, which is specifically designed to hold various attributes of a process, including pointers to other related data structures. Options A (Lsproc), B (DumpChk), and C (RegEdit) do not serve this purpose, as they are related to different functions or tools within the system.