Weekend Sale Limited Time 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: ac4s65

Volatile Memory is one of the leading problems for forensics.

ECCouncil 412-79 Full Course Access
ECCouncil 412-79 View All Questions

Volatile Memory is one of the leading problems for forensics. Worms such as code Red are memory resident and do write themselves to the hard drive, if you turn the system off they disappear. In a lab environment, which of the following options would you suggest as the most appropriate to overcome the problem of capturing volatile memory?

A.

Use Vmware to be able to capture the data in memory and examine it

B.

Give the Operating System a minimal amount of memory, forcing it to use a swap file

C.

Create a Separate partition of several hundred megabytes and place the swap file there

D.

Use intrusion forensic techniques to study memory resident infections

412-79 PDF/Engine
  • Printable Format
  • Value of Money
  • 100% Pass Assurance
  • Verified Answers
  • Researched by Industry Experts
  • Based on Real Exams Scenarios
  • 100% Real Questions
buy now 412-79 pdf
Get 65% Discount on All Products, Use Coupon: "ac4s65"
Next
You have been asked to investigate after a user has reported a threatening e-mail they...
When using Windows acquisitions tools to acquire digital evidence, it is important to use a...
Previous