Computer Hacking Forensic Investigator (CHFI v10) — Question 325

Gary is checking for the devices connected to USB ports of a suspect system during an investigation. Select the appropriate tool that will help him document all the connected devices.

Answer options

• A. DevScan
• B. Devcon
• C. fsutil
• D. Reg.exe

Correct answer: B

Explanation

The correct tool is Devcon, as it is specifically designed to manage device drivers and can list connected devices. DevScan is not a recognized tool for this purpose, fsutil deals with file system tasks, and Reg.exe is primarily for registry manipulation, making them unsuitable for documenting USB connections.