Question $15(10$ points$)$

Saved

For forensics, the virtual machines that allow to save a snapshot of memory have the advantage over using host operating systems as the

the hard disk acts as memory giving speed advantage.

neither volatile nor persistent data remains available even after turning off the VM thus saving the storage.

volatile data remains available even after turning off the VM$.$

persistent data remains available even after turning off the VM $.$