Free CompTIA Security+ SY0-601 Practice Question

When conducing digital forensics, order of volatility is an important consideration during the collection of data after an incident. With order of volatility in mind, which type of memory should evidence be collected from first?

  • Cache

  • Pagefile

  • RAM

  • Hard drive

This question's topic:
CompTIA Security+ SY0-601 / 
Operations and Incident Response
Your Score:

Check or uncheck an objective to set which questions you will receive.