A member of a digital forensics team, Joe arrives at a crime scene and is preparing to collect system data. Before powering the system off, Joe knows that he must collect the most volatile date first.Which of the following is the correct order in which Joe should collect the data?

A. CPU cache, paging/swap files, RAM, remote logging data
B. RAM, CPU cache. Remote logging data, paging/swap files
C. Paging/swap files, CPU cache, RAM, remote logging data
D. CPU cache, RAM, paging/swap files, remote logging data

Answer: D. CPU cache, RAM, paging/swap files, remote logging data

Computer Science & Information Technology

You might also like to view...

The terms data and information can be used interchangeably

Indicate whether the statement is true or false

Computer Science & Information Technology

Logical functions only return a value of TRUE or FALSE

Indicate whether the statement is true or false.

Computer Science & Information Technology