A forensics examiner is attempting to dump password cached in the physical memory of a live system but keeps receiving an error message.
Which of the following BEST describes the cause of the error?
A . The examiner does not have administrative privileges to the system
B . The system must be taken offline before a snapshot can be created
C . Checksum mismatches are invalidating the disk image
D . The swap file needs to be unlocked before it can be accessed
Answer: A