Question: Incidents response and handling When a system is powered down, we should power the system on to collect the memory. A- True B- False When

Incidents response and handling

When a system is powered down, we should power the system on to collect the memory.

A- True

B- False

When considering the order of volatility, what should be done first on a system that is currently running?

A- Pagefile

B- RAM Capture

C- Storage Drive

D- User Folder

In what two ways can memory be captured on a running system?

A- Local and Distributed

B- Local and Remote

C- Exploit and Remote

D- Local and Exploit

Step by Step Solution

There are 3 Steps involved in it

1 Expert Approved Answer
Step: 1 Unlock blur-text-image
Question Has Been Solved by an Expert!

Get step-by-step solutions from verified subject matter experts

Step: 2 Unlock
Step: 3 Unlock

Students Have Also Explored These Related Databases Questions!