SY0-501 | When performing data acquisition on a workstation…

Question: 1

When performing data acquisition on a workstation, which of the following should be captured based on memory volatility? (Select TWO).

A. USB-attached hard disk
B. Swap/pagefile
C. Mounted network storage
D. ROM
E. RAM

Answer: A,D

Related Posts

Leave a Reply

Your email address will not be published. Required fields are marked *