Exam 312-49v10 All QuestionsBrowse all questions from this exam
Question 272

Gary is checking for the devices connected to USB ports of a suspect system during an investigation. Select the appropriate tool that will help him document all the connected devices.

    Correct Answer: B

    Devcon is a command-line utility available in Windows that provides detailed information about devices connected to the system, including USB devices. It allows you to list all devices, view their device IDs, and other relevant information. This makes it the suitable tool for documenting all connected devices during an investigation.

Discussion
aqeel1506Option: B

The correct answer is B. Devcon. Devcon is a command-line utility that provides information about devices connected to a Windows system, including USB devices. It can be used to list all devices, their device IDs, and other relevant information. Devcon is a useful tool for documenting connected devices during a digital forensic investigation. Here's a brief explanation of the other options: A. DevScan: Not a valid tool. C. fsutil: A command-line utility used to manage files and file systems, but not related to device enumeration. D. Reg.exe: A command-line utility used to manage the Windows Registry, but not directly related to device enumeration. Note: Devcon is a built-in Windows tool, and its output can be redirected to a file for documentation purposes. For example: devcon >> devices.txt

ElbOption: B

B > DevCon (Devcon.exe), the Device Console, is a command-line tool that displays detailed information about devices on computers running Windows. You can use DevCon to enable, disable, install, configure, and remove devices.