When performing data acquisition on a workstation, which of the following should be captured based on memory volatility? (Select two.)

Posted by: Pdfprep Category: RC0-501 Tags: , ,

When performing data acquisition on a workstation, which of the following should be captured based on memory volatility? (Select two.)
A . USB-attached hard disk
B . Swap/pagefile
C . Mounted network storage
D . ROM
E . RAM

Answer: A,D

Leave a Reply

Your email address will not be published.