DisableLastAccess relates to modifying last access tracking using which Windows components?

Study for the EC-Council Certified Security Specialist (ECSS) Test. Enhance your skills with flashcards and multiple-choice questions; each question provides hints and explanations. Prepare confidently for your exam!

Multiple Choice

DisableLastAccess relates to modifying last access tracking using which Windows components?

Explanation:
Last access tracking in NTFS can be disabled by adjusting both the registry and the file system behavior tool. The setting lives in the Windows registry under the HKEY root (specifically the NtfsDisableLastAccessUpdate value in the FileSystem key), which is where NTFS behavior is configured on the system. You can also apply the same change directly with the fsutil command-line tool, using something like fsutil behavior set DisableLastAccess 1 to stop updating last access timestamps. BIOS/UEFI and standard GUI areas like Group Policy or Control Panel don’t provide the direct mechanism for this particular change. Regedit is simply a registry editor, while the official, direct methods are the HKEY registry location and the fsutil tool.

Last access tracking in NTFS can be disabled by adjusting both the registry and the file system behavior tool. The setting lives in the Windows registry under the HKEY root (specifically the NtfsDisableLastAccessUpdate value in the FileSystem key), which is where NTFS behavior is configured on the system. You can also apply the same change directly with the fsutil command-line tool, using something like fsutil behavior set DisableLastAccess 1 to stop updating last access timestamps. BIOS/UEFI and standard GUI areas like Group Policy or Control Panel don’t provide the direct mechanism for this particular change. Regedit is simply a registry editor, while the official, direct methods are the HKEY registry location and the fsutil tool.

Subscribe

Get the latest from Examzify

You can unsubscribe at any time. Read our privacy policy