When performing data acquisition on a workstation, which of the following should be captured based on memory volatility? (Choose two.)
A) USB-attached hard disk
B) Swap/pagefile
C) Mounted network storage
D) ROM
E) RAM
Correct Answer:
Verified
Q950: A security technician has been receiving alerts
Q951: A company wants to ensure confidential data
Q952: An audit reported has identifies a weakness
Q953: An analyst receives an alert from the
Q954: A software development manager is taking over
Q956: An organization is expanding its network team.
Q957: A systems administrator has isolated an infected
Q958: A security analyst is securing smartphones and
Q959: A systems administrator wants to implement a
Q960: A security analyst is reviewing the following
Unlock this Answer For Free Now!
View this answer and more for free by performing one of the following actions
Scan the QR code to install the App and get 2 free unlocks
Unlock quizzes for free by uploading documents