ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 82 - ECSS discussion

Report
Export

Below are the elements included in the order of volatility for a typical computing system as per the RFC 3227 guidelines for evidence collection and archiving.

l.Archival media

2.Remote logging and monitoring data related to the target system

3.Routing table, process table, kernel statistics, and memory

4.Registers and processor cache

5-Physical configuration and network topology

6.Disk or other storage media

7.Temporary system files

Identify the correct sequence of order of volatility from the most to least volatile for a typical system.

A.

7->5- >4->3 ->2 >6 >1

Answers
A.

7->5- >4->3 ->2 >6 >1

B.

4 >3 >7->l >2 ->5--->6

Answers
B.

4 >3 >7->l >2 ->5--->6

C.

2--->1--->4-->3-->6-->5--->7

Answers
C.

2--->1--->4-->3-->6-->5--->7

D.

4.>3 >7>6.>2-.>5- >l

Answers
D.

4.>3 >7>6.>2-.>5- >l

Suggested answer: D

Explanation:

This order correctly reflects the volatility of data from most volatile (disappears quickly) to least volatile (most persistent):

Registers and processor cache:These contain the CPU's most immediate working data, changing rapidly.

Routing table, process table, kernel statistics, and memory (RAM):These hold system state information, but can be modified by running processes or events.

Temporary system files:Designed to be transient, but may persist for some time depending on usage patterns.

Disk or other storage media:Holds data intended to persist, but is subject to modification.

Remote logging and monitoring data related to the target system:Often stored off-site, less volatile than local data.

Physical configuration and network topology:Relatively static information about the system's setup.

Archival media:Designed for long-term storage, changes to this data are intentional and infrequent.

asked 24/10/2024
Akhil Borkar
40 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first