EC-Council
212-89 · Question #56
Which of the following types of digital evidence is temporarily stored in a digital device that requires constant power supply and is deleted if the power supply is interrupted?
Sign in or unlock 212-89 to reveal the answer and full explanation for question #56. The question stem and answer options stay visible for context.
Computer Forensics in Incident Handling
Question
Which of the following types of digital evidence is temporarily stored in a digital device that requires constant power supply and is deleted if the power supply is interrupted?
Options
- ASlack space
- BProcess memory
- CEvent logs
- DSwap file
Unlock 212-89 to see the answer
You've previewed enough free 212-89 questions. Unlock 212-89 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#volatile evidence#process memory#RAM forensics#digital evidence types