Hello Peers, Today we are going to share all week’s assessment and quizzes answers of the Windows Registry Forensics course launched by Coursera totally free of cost✅✅✅. This is a certification course for every interested student.
In case you didn’t find this course for free, then you can apply for financial ads to get this course for totally free.
Check out this article – “How to Apply for Financial Ads?”
About The Coursera
Coursera, India’s biggest learning platform launched millions of free courses for students daily. These courses are from various recognized universities, where industry experts and professors teach in a very well manner and in a more understandable way.
Here, you will find Windows Registry Forensics Exam Answers in Bold Color which are given below.
These answers are updated recently and are 100% correct✅ answers of all week, assessment, and final exam answers of Windows Registry Forensics from Coursera Free Certification Course.
Use “Ctrl+F” To Find Any Questions Answer. & For Mobile User, You Just Need To Click On Three dots In Your Browser & You Will Get A “Find” Option There. Use These Option to Get Any Random Questions Answer.
About Windows Registry Forensics Course
The Windows Registry Forensics course shows you how to examine the live registry, the location of the registry files on the forensic image, and how to extract files.
Course Apply Link – Windows Registry Forensics
Windows Registry Forensics Quiz Answers
Week 1 Quiz Answers
Quiz 1: Windows Registry Forensics Quiz
Q1. The Windows Registry is defined as
- SQL database
- Central relational database
- Central hierarchical database
- Flat file
Q2. The Windows Registry replaced which type of file?
- Link Files
- Property lists
- Configuration and Initialization files
- Log Files
Q3. What information is NOT contained in the Windows Registry?
- System Information
- Disk structure information
- Application specific information
- user information
Q4. The Windows Registry can be useful for?
- Validating findings through an investigation
- Determining the number of partitions on a drive
- Determining cluster size
- looking up a phone number
Q5. Registry is important because it records?
- installed programs
- user account information
- all of these
- devices attached to the computer
Q6. The type of case you are investigating…
- will determine the type of information you are looking for
- will NOT determine the type of information you are looking for
- only matters if it is a Windows 7 computer
- has nothing to do with the registry
Q7. The Windows Registry contains
- All of these
- Keys
- Hives
- Sub-Keys
- Data
- Values
Q8. The registry hive files are pulled into memory, handle keys, and represented as
- user Keys (UK)
- File Keys (FK)
- Block Keys (BK)
- Handle Keys (HK)
Q9. Which Registry Key is only found on a live running system?
- Security
- Sam
- Hardware
- System
- Software
Q10. Registry values can be in several different forms. Which is not a registry value form?
- Binary Data
- SQL Data
- String Data
- Hex Data
Q11. The user specific registry files contained in the registry are?
- PTUser.reg and user.Dat
- Amcache and Sam
- NTUser.Dat and UsrClass.Dat
- None of the above
Q12. The system specific files contained within the registry are?
- security
- All of these
- AmCache
- software
- Sam
- system
Q13. The Sam, Security, Software, and System Registry files are located at
- Volume root\Windows\Sam\config
- Volume root\Windows\system32\config
- Volume root\WindowsNT\system32\config
- Volume root\system32\user\config
Q14. What are the two registry files that relate to a specific user?
- NTUser.dat and Software
- NTUser.dat and USRClass.dat
- Sam and System
- Sam and Security
Q15. Registry browser is a
- Hex editor
- Registry hive sub-key
- Older type of Windows registry prior to Windows 95
- Specialized tool used to view the Window Registry
Q16. Which sub-key is used to determine the current control set?
- Windows
- System
- Microsoft
- Select
Q17. What registry hive file contains the the time zone setting
- Sam
- Software
- System
- Security
Q18. The Windows OS Version and Install date are contained in the __ registry hive?
- Security
- System
- Software
- Sam
Q19. Regarding the live Windows Registry, which two hive keys or sub keys only exists in the live registry?
- Both A and B
- HKEY_LOCAL_MACHINE—HARDWARE SUBKEY
- None of these
- HKEY_LOCAL_MACHINE-SYSTEM SUBKEY
- HKEY_LOCAL_MACHINE-SAM SUBKEY
- HKEY_CURRENT_USER
Q20. Which two Registry files are not accessible on a live running computer. As seen in Regedit.
- Sam
- Both Security and software
- security
- software
- system
- Both Sam and security
Q21. What Registry sub key contains a list of recently used documents by file extension?
- The Run Sub Once subkey
- The Run MRU subkey
- Recent Docs subkey
- User Assist
Q22. The typed URL subkey contains:
- Recently run applications
- Search terms typed into Windows Explorer
- Programs run at startup
- Web Addresses typed into the Internet Explorer Address Bar
Q23. The values in which key are stored using ROT13
- Run
- Typed URLs
- User Assist
- Recent Applications
Q24. This sub key tracks recently used applications and may contain a record of the files that were opened with each application…
- Run Once
- User Assist
- Recent Apps
- Run MRU
Q25. This subkey tracks user specific, persistent, applications that are set to run at start up?
- Run MRU
- Recent Apps
- Run
- Run Once
Q26. This key tracks files that have been opened or saved within a Windows Open/Save dialog box. This includes web browsers and commonly used applications?
- Run MRU
- ComDlg32 OpenSavePidMRU
- Recent Docs
- Recent Apps
Q27. This key maintains a list of all the values typed into the Run box on the Start menu?
- Run
- Run MRU
- WordWheel Query
- Run Once
Q28. The subkey Typed Paths does what?
- Keeps track of URL typed into the Internet Explorer Address Bar
- Keeps track of Files, Directories, or programs accessed by typing a File path into Windows Explorer
- comdlg 32
- Runs at startup
Q29. Microsoft Office MRU are…
- programs or applications launched through the windows run box
- User specific programs that are set to run at startup with no interaction from
- Recently used Microsoft Office Documents
- created when a user types a path to a directory, file or application into the windows explorer.
Q30. What subkey tracks user key word searches?
- ComDlg32
- Recent Apps
- Run MRU
- WordWheel query
Q31. The SAM file stores what information?
- Information about files and applications recently accessed by a user
- information about the users internet accounts and browser history
- Programs set to Run at startup by a user
- information about each user such as login information, login password hashes, and group information
Q32. The Security identifier SID is comprised of 3 parts…
- Issuing identifier-Domain authority-Machine identifier
- Issuing authority- Machine/domain identifier- Relative identifier
- user name – Profile path- User directory
- All of the above
Q33. The Machine identifier of the local machine is found in the __ subkey
- Users
- Domains
- Groups
- Account
Q34. The relative identifier or RID identifies a?
- User
- Domain
- Group
- Machine
Q35. The Names subkey identifier the user’s name and __ ?
- Relative Identifier
- last logon time
- log on count
- password hash
Q36. The last logon time is stored in the _ subkey?
- Names
- Accounts
- User
- Domains
Q37. The V value of the users subkey contains?
- last logon date and time
- username and password hash
- log on count
- number of failed logon’s
Q38. What is the function of the RunMRU subkey in the Software Hive File?
- all of the above
- This key tracks user searches
- This key shows programs that run at startup
- This key maintains a list of all the values typed into the Run box on the Start menu
Q39. The OpenSavePidMRU sub-key, which is a sub-key of Comdlg 32 tracks … ?
- User logon information and last logged on user
- AutoStart locations
- values typed into the Run box on the Start menu
- A specific executable used to open the files
Q40. Information indicating the last logged on user would be found in which sub-key within the software hive file?
- Comdlg 32
- Classes
- LogonUI
- Run
Q41. _ is an autostart location in the Software Hive File.
- Run Key
- Comdlg 32
- RunMRU
- Installed printers
Q42. Windows OS install date and time would be found in the Software file in which sub-key?
- Run Once
- Winlogon
- Windows
- Current Version
Q43. The network list sub-keys profiles and signatures contain what information?
- Domain user account information
- Wireless network dates and times and gateway MAC address
- Evidence of program execution
- User account information
Q44. In the software hive file, what 2 sub-keys contain information regarding the connection of USB devices?
- Mountpoints and Mountspoints2
- Mountpoints2 and RunMRU
- Devices and EMD Management
- USBStore and USB
Q45. What key within the system file is used to determine the current control set?
- Control
- Prefetch
- Services
- Select
Q46. The last shutdown time is found within which sub-key in the system hive file?
- USBstore
- select
- control
- Windows
Q47. In the system hive, the Windows services sub-key tracks programs that _?
- is not a subkey in the system hive
- run automatically when the system is booted, and are started by the system and with no interaction from the user
- Tracks USB Devices
- Indicates when the system needs service
Q48. What subkey in the system hive file contains settings for the prefetch utility?
- Select
- prefetchParameters
- Windows
- Controlset
Q49. The setting within the system hive file that controls whether or not the page file is cleared at shutdown is _?
- Memory Management
- shutdown
- Crash Control
- select
Q50. What type of information is found at this location in the System hive file
Location:ControlSet001\Enum\USBSTOR\”Device”\”Serial# or Unique instance ID”\Properties{83da6326-97a6-4088-9453-a1923f573b29}
- user account information
- USB device connection and disconnection dates and times
- programs set to run at startup
- prefetch settings
Q51. Appcompatcache was created by Microsoft to identify application compatibility Issues between 32 bit and 64 bit applications. What does the cache data track?
- All of these
- File Path
- Last Modified Time
- File Size
- None of these
Q52. Information found in the Background Activity Moderator (BAM) sub-key proves?
- Program execution by a specific user
- Nothing
- Program execution but not by a specific user
- A change to the file MFT record
Q53. What do Shellbags track?
- Folders or Directories within the windows file system
- File Times
- Recently used applications
- Programs run at startup
Q54. The _ hive file stores artifacts such as the Last write time, Install Dates, Application Name, Version, and path to exe or dill
- The NTUser.dat Hive File
- The AmCache Hive File
- The Sam File
- The System Hive File
Conclusion
Hopefully, this article will be useful for you to find all the Week, final assessment, and Peer Graded Assessment Answers of the Windows Registry Forensics Quiz of Coursera and grab some premium knowledge with less effort. If this article really helped you in any way then make sure to share it with your friends on social media and let them also know about this amazing training. You can also check out our other course Answers. So, be with us guys we will share a lot more free courses and their exam/quiz solutions also, and follow our Techno-RJ Blog for more updates.
Write more, thats all I have to say. Literally, it seems as though you relied on the video to make your point. You clearly know what youre talking about, why throw away your intelligence on just posting videos to your site when you could be giving us something informative to read?
不知道说啥,开心快乐每一天吧!
Wow! This can be one particular of the most helpful blogs We’ve ever arrive across on this subject. Actually Great. I’m also an expert in this topic so I can understand your hard work.
Hello! I could have sworn I’ve been to this blog before but after browsing through some of the post I realized it’s new to me. Anyways, I’m definitely happy I found it and I’ll be book-marking and checking back frequently!
There is noticeably a bundle to know about this. I assume you made certain nice points in features also.
Hi my family member! I wish to say that this post is awesome, great written and come with almost all significant infos. I would like to look more posts like this .
An interesting dialogue is value comment. I think that you must write extra on this matter, it won’t be a taboo subject but usually persons are not enough to talk on such topics. To the next. Cheers
I like this web site very much, Its a rattling nice position to read and incur information. “God cannot alter the past, but historians can.” by Samuel Butler.
You actually make it seem so easy with your presentation but I find this matter to be really something which I think I would never understand. It seems too complicated and very broad for me. I’m looking forward for your next post, I’ll try to get the hang of it!
Can I just say what a reduction to seek out someone who actually knows what theyre talking about on the internet. You positively know the right way to deliver a problem to mild and make it important. More people need to read this and perceive this aspect of the story. I cant believe youre no more common since you positively have the gift.
I don’t think the title of your article matches the content lol. Just kidding, mainly because I had some doubts after reading the article.
Hello there! Do you know if they make any plugins to assist with Search Engine Optimization? I’m trying to get my blog to rank for some targeted keywords but I’m not seeing very good results. If you know of any please share. Thanks!
Generally I do not read post on blogs, but I would like to say that this write-up very forced me to take a look at and do it! Your writing style has been surprised me. Thanks, very nice article.
I like this weblog very much, Its a very nice position to read and obtain info .
Hey there! I know this is somewhat off topic but I was wondering if you knew where I could get a captcha plugin for my comment form? I’m using the same blog platform as yours and I’m having difficulty finding one? Thanks a lot!
You should take part in a contest for one of the best blogs on the web. I will recommend this site!
I just could not depart your web site before suggesting that I really loved the standard info a person provide to your visitors? Is going to be back steadily in order to check out new posts
I like what you guys are up too. Such clever work and reporting! Keep up the superb works guys I have incorporated you guys to my blogroll. I think it will improve the value of my web site 🙂
Merely wanna remark on few general things, The website pattern is perfect, the subject matter is very good : D.
Great – I should definitely pronounce, impressed with your website. I had no trouble navigating through all tabs and related information ended up being truly simple to do to access. I recently found what I hoped for before you know it in the least. Reasonably unusual. Is likely to appreciate it for those who add forums or anything, website theme . a tones way for your client to communicate. Excellent task.
Youre so cool! I dont suppose Ive learn anything like this before. So nice to search out anyone with some original thoughts on this subject. realy thank you for beginning this up. this web site is one thing that is wanted on the net, someone with a bit of originality. helpful job for bringing something new to the web!
As a Newbie, I am constantly exploring online for articles that can help me. Thank you
Some really nice stuff on this web site, I like it.
Today, I went to the beachfront with my kids. I found a sea shell and gave it to my 4 year old daughter and said “You can hear the ocean if you put this to your ear.” She put the shell to her ear and screamed. There was a hermit crab inside and it pinched her ear. She never wants to go back! LoL I know this is completely off topic but I had to tell someone!
You have brought up a very excellent details , regards for the post.
cialis super active cialis 40mg erectile dysfunction medicines
It’s actually a great and useful piece of information. I’m glad that you shared this useful info with us. Please keep us up to date like this. Thanks for sharing.
buy cefadroxil 250mg online cheap combivir pills buy propecia 1mg online
purchase estrace pills minipress 2mg cheap purchase prazosin
order diflucan online cheap buy generic ampicillin purchase ciprofloxacin pills
mebendazole cheap tadalafil online buy tadalafil 20mg ca
order flagyl 400mg without prescription bactrim 480mg pill order cephalexin pill
avana 200mg us order cambia generic cost diclofenac
buy generic indocin over the counter where can i buy indocin order suprax 100mg
oral tamoxifen 10mg buy generic nolvadex online ceftin 250mg generic
order trimox online cheap buy generic biaxin buy clarithromycin 250mg for sale
buy generic clonidine online catapres drug tiotropium bromide 9mcg for sale
purchase bimatoprost online cheap buy trazodone without prescription buy generic desyrel 50mg
buy suhagra 50mg without prescription cheap sildenafil sildenafil 150 mg
leflunomide 10mg price arava 20mg cheap azulfidine 500 mg cheap
cialis 10mg tablet oral tadalafil 40mg canadian cialis and healthcare
stromectol price usa erectile dysfunction drug prednisone generic
I’m not sure where you’re getting your info, but good topic. I needs to spend some time learning more or understanding more. Thanks for great information I was looking for this info for my mission.
altace 5mg without prescription altace us purchase etoricoxib
Spot on with this write-up, I actually think this website needs far more consideration. I’ll in all probability be again to learn rather more, thanks for that info.
asacol 400mg tablet buy azelastine 10 ml online cheap avapro 150mg over the counter
acetazolamide cost order azathioprine pill cost azathioprine
lanoxin 250mg oral telmisartan sale molnunat usa
buy naproxen 250mg generic order prevacid generic where to buy prevacid without a prescription
proventil price generic pyridium phenazopyridine oral
order singulair 10mg generic purchase amantadine sale dapsone for sale online
purchase nifedipine without prescription order aceon 8mg pills fexofenadine for sale online
Youre so cool! I dont suppose Ive learn something like this before. So good to find any individual with some original thoughts on this subject. realy thanks for beginning this up. this website is something that is needed on the internet, somebody with somewhat originality. useful job for bringing one thing new to the internet!
buy priligy 60mg sale orlistat 120mg cost orlistat 60mg pills
diltiazem 180mg without prescription order zyloprim without prescription brand allopurinol 100mg
order crestor generic order generic rosuvastatin domperidone online order
tetracycline medication flexeril brand where can i buy lioresal
toradol pill buy colchicine generic inderal price
I am curious to find out what blog platform you’re utilizing? I’m having some minor security problems with my latest blog and I would like to find something more safe. Do you have any suggestions?
generic clopidogrel methotrexate where to buy order coumadin 2mg without prescription
buy metoclopramide 10mg generic cost metoclopramide 10mg order nexium without prescription
order topiramate 200mg online cheap buy levaquin online oral levaquin 250mg
order avodart 0.5mg pills buy zantac paypal mobic 7.5mg over the counter
buy cheap celebrex buy celecoxib 200mg pills order zofran sale
aldactone drug simvastatin 20mg canada buy valacyclovir 500mg generic
finasteride without prescription viagra pills viagra 50mg pills
buy tadalafil purchase cialis without prescription cheap sildenafil sale
order tadalafil 20mg online buy generic diflucan 100mg best erection pills
buy generic azulfidine buy sulfasalazine 500mg pills verapamil 240mg for sale
how to get divalproex without a prescription isosorbide over the counter buy imdur 40mg without prescription
azathioprine drug cheap lanoxin micardis uk
molnupiravir generic buy naproxen 500mg generic cefdinir 300 mg pills
buy generic lansoprazole 15mg purchase albuterol pantoprazole 20mg pills
pyridium uk order phenazopyridine 200mg without prescription buy symmetrel 100mg
buy dapsone pill avlosulfon 100 mg price cost aceon
oral allegra order generic glimepiride buy amaryl 4mg generic
arcoxia 120mg price cost arcoxia 120mg astelin 10ml nasal spray
amiodarone uk cost coreg 6.25mg buy phenytoin paypal
buy irbesartan sale order avapro without prescription purchase buspirone online
order albendazole 400mg sale where to buy medroxyprogesterone without a prescription provera usa
buy biltricide 600 mg without prescription order praziquantel 600mg pill buy periactin pill
purchase luvox online cheap order nizoral 200 mg purchase duloxetine without prescription
glucotrol pills betamethasone tubes order betamethasone 20gm online
clomipramine 50mg pill anafranil online buy prometrium pill
generic tinidazole buy olanzapine 10mg sale buy bystolic cheap
diovan 80mg pill how to buy valsartan purchase combivent sale
order decadron 0,5 mg online cheap purchase starlix pills order nateglinide 120 mg pills
capoten ca captopril 25mg tablet order tegretol 400mg online cheap
buy ciprofloxacin pills buy lincomycin 500 mg online cheap generic duricef 500mg
buy lamivudine paypal where to buy combivir without a prescription order quinapril 10 mg generic
frumil for sale online frumil 5mg pill where to buy acivir without a prescription
buy valaciclovir 1000mg for sale order famvir purchase ofloxacin generic
keppra tablet buy cotrimoxazole 960mg online cheap sildenafil canada
buy generic tadalafil 40mg tadalafil online buy viagra 50mg cost
cheap zaditor 1mg buy zaditor imipramine us
buy generic minoxytop online purchase tamsulosin pill best otc ed pills
buy acarbose paypal griseofulvin 250mg without prescription griseofulvin price
I love it when people come together and share opinions, great blog, keep it up.
oral aspirin buy generic imiquimod online buy imiquad
You actually make it seem really easy with your presentation however I find this matter to be really one thing which I feel I’d by no means understand. It seems too complicated and extremely huge for me. I’m having a look forward in your subsequent submit, I will try to get the dangle of it!
This is a topic which is close to my heart… Many thanks!
Exactly where are your contact details though?
buy dipyridamole 25mg for sale buy plendil online cheap pravachol over the counter
meloset 3 mg generic buy aygestin without a prescription order generic danocrine 100 mg
dydrogesterone price order generic duphaston 10 mg jardiance usa
It’s awesome to visit this website and reading the views of
all mates on the topic of this piece of writing, while I am
also zealous of getting know-how.
buy monograph online order monograph 600 mg for sale pletal 100mg canada
buy prasugrel 10 mg thorazine for sale online buy tolterodine no prescription
pyridostigmine 60mg over the counter buy mestinon without a prescription order generic maxalt 5mg
cheap ferrous sulfate 100mg order ascorbic acid 500 mg without prescription order sotalol 40 mg without prescription
vasotec ca pill vasotec 10mg lactulose us
purchase betahistine sale brand haldol benemid 500 mg oral
premarin 0.625mg brand purchase cabergoline for sale viagra 50 mg
omeprazole order lopressor 100mg cost order lopressor 50mg
buy micardis paypal micardis brand molnunat pills
tadalafil women brand cialis 40mg oral sildenafil 100mg
buy cenforce 100mg sale purchase naproxen generic buy chloroquine tablets
I want to to thank you for this very good read!!
I definitely enjoyed every bit of it. I’ve got you bookmarked to look at new stuff you post…
generic modafinil 100mg prednisone cost cost deltasone
omnicef 300 mg canada cheap lansoprazole 30mg prevacid ca
isotretinoin where to buy how to get amoxicillin without a prescription purchase zithromax online
brand azithromycin 500mg order neurontin 600mg for sale order neurontin 800mg for sale
buy generic atorvastatin for sale buy atorvastatin 40mg pill buy amlodipine 5mg
best casino slots online playing poker online order lasix 100mg online cheap
pantoprazole cost buy generic phenazopyridine 200 mg order generic pyridium
free slots online albuterol 4mg ca order allergy pills
real money casino games online casino games ivermectine online