GIAC Certified Forensic Analyst (GCFA) — Question 37

Sandra wants to create a full system state backup of her computer, which is running on Microsoft Windows XP operating system. Which of the following is saved in full state system backup?
Each correct answer represents a complete solution. Choose all that apply.

Answer options

• A. file system information
• B. Registry
• C. Windows boot files
• D. Active Directory (NTDS)

Correct answer: B, C, D

Explanation

The correct answers B, C, and D are included in a full system state backup because they contain essential system configuration and operational data. Option A, file system information, is not included in a system state backup, which focuses on system-related components rather than user files and data.