Computer Hacking Forensic Investigator (CHFI v10) — Question 315

What system details can an investigator obtain from the NetBIOS name table cache?

Answer options

• A. List of files opened on other systems
• B. List of the system present on a router
• C. List of connections made to other systems
• D. List of files shared between the connected systems

Correct answer: C

Explanation

The correct answer is C because the NetBIOS name table cache contains information about active connections to other systems, which is crucial for an investigator to understand network interactions. Options A and D pertain to file access, which are not recorded in the cache, while B refers to router systems, which are unrelated to the NetBIOS name resolution process.