Which of the following types of digital evidence is considered the MOST volatile?
A.
Data on a hard disk
B.
Temporary file space
C.
Swap file
D.
Random access memory
The Answer Is:
D
This question includes an explanation.
Explanation:
Random Access Memory (RAM) is considered the most volatile type of digital evidence because it is temporary storage that is wiped clean when the system is powered off or restarted. This makes it crucial for investigators to capture RAM contents as quickly as possible during an incident response, as it can contain valuable evidence, such as running processes and network connections.
CFR-410 PDF/Engine
Printable Format
Value of Money
100% Pass Assurance
Verified Answers
Researched by Industry Experts
Based on Real Exams Scenarios
100% Real Questions
Get 65% Discount on All Products,
Use Coupon: "ac4s65"