ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 92 - SY0-601 discussion

Report
Export

Which of the following in a forensic investigation should be priorities based on the order of volatility? (Select TWO).

A.
Page files
Answers
A.
Page files
B.
Event logs
Answers
B.
Event logs
C.
RAM
Answers
C.
RAM
D.
Cache
Answers
D.
Cache
E.
Stored files
Answers
E.
Stored files
F.
HDD
Answers
F.
HDD
Suggested answer: C, D

Explanation:

In a forensic investigation, volatile data should be collected first, based on the order of volatility. RAM and Cache are examples of volatile data. Reference: CompTIA Security+ Study Guide 601, Chapter 11

asked 02/10/2024
Victor Bogdan Grecu
34 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first