When performing data acquisition on a workstation, which of the following should be captured based on memory volatility? (Choose two.)
A. USB-attached hard disk
B. Swap/pagefile
C. Mounted network storage
D. ROM
E. RAM
When performing data acquisition on a workstation, which of the following should be captured based on memory volatility? (Choose two.)
A. USB-attached hard disk
B. Swap/pagefile
C. Mounted network storage
D. ROM
E. RAM
You must be logged in to post a comment.
Agreed
0
0
did these questions help you pass?
0
1