A digital forensics investigator performs a browser history analysis after a suspected breach. The investigator deals with three web browsers: Mozilla Firefox, Coogle Chrome, and Microsoft Edge. The suspect was using Windows. The investigator must locate the cache, cookies, and history for all three browsers. What are the correct locations?

A. Firefox: Cache - C:UsersWAppDataLocalMozillaFirefoxProfilesXXXXXXXX.defaultcache2;Chrome:History - C:Users{user)AppDataLocalGoogleCrromeUser DataDefault;Edge: Cookies -C:UsersAdminAppDataLocalPackagesMicrosoft.MicrosoftEdge_xxxxxxxxxxACMicrosoftEdgeCookies

B. Firefox: Cookies - C:Users\AppDataRoamingMozillaFirefoxProfilesXXXXXXXX.defaultcookies.sqlite;Chrome: Cache - C:Users{user}AppDataLocalCoogleChromeUser DataDefaultCache;Edge: History - C:UsersAdminAppDataLocalMicrosoftWindowsHistory

C. Firefox: Cache - C:UsersWAppDataRoamingMozillaFirefoxProfilesXXXXXXXX.defaultplaces.sqlite;Chrome: Cookies - C:Users{user}AppDataLocalGoogleChromeUser DataDefault;Edge: History - C:UsersAdminAppDataLocalMicrosoftWindowsWebCache

D. Firefox: History - C:Users\AppDataLocalMozillaFirefoxProfilesXXXXXXXX.defaultcookies.sqlite;Chrome: Cache - C:Users{user}AppDataLocalCoogleChromeUser DataDefaultCache;Edge: Cookies - C:UsersAdminAppDataLocalPackagesMicrosoft.MicrosoftEdge_xxxxxxxxxxACMicrosoftEdgeCookies








 

Suggested Answer: B





This question is in 312-49V10 EC-Council Computer Hacking Forensic Investigator (CHFI) v10 Exam
For getting EC-Council Computer Hacking Forensic Investigator (CHFI) Certificate







Disclaimers:
The website is not related to, affiliated with, endorsed or authorized by EC-Council. 
Trademarks, certification & product names are used for reference only and belong to EC-Council.
The website does not contain actual questions and answers from EC-Council's Certification Exams.