A security administrator working for a law enforcement organization is asked to secure a computer
system at the scene of a crime for transport to the law enforcement forensic facility. In order to
capture as mush evidence as possible, the computer system has been left running. The security
administrator begins information by image which of the following system components FIRST?

A.
NVRAM

B.
RAM

C.
TPM

D.
SSD