nerdexam
CiscoCisco

200-201 · Question #261

200-201 Question #261: Real Exam Question with Answer & Explanation

The correct answer is A: swap files. Volatile data refers to information that resides in temporary or ephemeral storage and can be easily lost or changed when a system is powered off or restarted. Login sessions and swap files are examples of volatile data that exist temporarily in system memory (RAM) and may contai

Submitted by rohit_dlh· Mar 6, 2026Host-Based Analysis

Question

According to the NIST SP 800-86, which two types of data are considered volatile? (Choose two.)

Options

  • Aswap files
  • Btemporary files
  • Clogin sessions
  • Ddump files
  • Efree space

Explanation

Volatile data refers to information that resides in temporary or ephemeral storage and can be easily lost or changed when a system is powered off or restarted. Login sessions and swap files are examples of volatile data that exist temporarily in system memory (RAM) and may contain sensitive information. Other types of volatile data include information stored in RAM, running processes, network connections, etc.

Topics

#NIST#volatile data#forensics#memory analysis

Community Discussion

No community discussion yet for this question.

Full 200-201 PracticeBrowse All 200-201 Questions