For 3, we had to put multiple answers to account for users, such as yourself, who do not perform the examination in UTC time, and instead have Autopsy/disk image/etc set to their local time zone, and not UTC (as in the best practice, you should always use UTC for everything, and then convert accordingly, if needed)
The question has been changed to only have the month and year, and only one correct answer.
For 8, we had to make a change to that question as well because of some users not seeing results when they use a *nix system for some reason.
NOTE: I also edited your comment to remove the information for the correct answers.
Appreciate your reply Brian and my apologies for including spoilers.
Ok about question 3 already seen the change on the quiz.
Can’t figure out question 8 though as all options alone are incorrect. I suppose the quiz waits a composite answer what is odd to a “how many” question.
The reason for 8 is that we have to have multiple correct answers unfortunately, and there is no way to differentiate between the small subset of users that are on *nix systems who see one thing, and then everyone else.
We are looking at changing question 8 completely, as the problem didn’t arise into the last few days, and we want to ensure that users, on all platforms, are seeing the same information and results.
I am also having problems with Lab Quiz in section 8. Q5 to Q7 were marked as wrong because I was getting the date from “File Metatadata” which differs from the one in the column (Data Accessed) The one that works is that in the column (Could it be a bug in the application? v4.14.0) BTW, Q7 was not in the Lab Steps Prerrequisite.
Q8 it is another question where I had a wrong answer but I do not know why. Applying filters to exclude VMWare in “Device Make” and also discarding “HUBS” appearing in column “Device Model” I get a couple of devices but it was wrong. It seems that the only valid answer, or at least that it would accept, it is #, but I have Windows so I left it wrong…
Understood. What I would recommend is that Question 8 consider as correct checking either the Unix result or the Windows result options - otherwise neigther Windows nor Unix users will get it right. Not sure if it is easy to do but if your page could check the OS would avoid Windows users the easy answer.