A security administrator working for a law enforcement organization is asked to secure a computer system at
the scene of a crime for transport to the law enforcement forensic facility. In order to capture as much evidence
as possible, the computer system has been left running.
The security administrator begins information by image which of the following system components FIRST?

A.
NVRAM

B.
RAM

C.
TPM

D.
SSD