When performing data acquisition on a workstation, which of the following should be captured based on memory volatility? (Select two.)
A) USB-attached hard disk
B) Swap/pagefile
C) Mounted network storage
D) ROM
E) RAM
Correct Answer:
Verified
Q628: A user attempts to send an email
Q629: A systems administrator is attempting to recover
Q630: A security analyst receives the following output:
Q631: A security administrator is working with the
Q632: While testing a new application, a developer
Q634: A user has attempted to access data
Q635: A user suspects someone has been accessing
Q636: Which of the following BEST explains "likelihood
Q637: A systems administrator just issued the ssh-keygen
Q638: A technician wants to configure a wireless
Unlock this Answer For Free Now!
View this answer and more for free by performing one of the following actions
Scan the QR code to install the App and get 2 free unlocks
Unlock quizzes for free by uploading documents