nerdexam
EC-Council

312-49 · Question #437

The rule of thumb when shutting down a system is to pull the power plug. However, it has certain drawbacks. Which of the following would that be?

The correct answer is A. Any data not yet flushed to the system will be lost B. All running processes will be lost. Abruptly cutting power (pulling the plug) bypasses the normal OS shutdown sequence, which has two key drawbacks: (A) Any data held in memory buffers or write caches that has not yet been flushed to disk will be permanently lost, and (B) all running processes are instantly…

Submitted by rania.sa· Apr 18, 2026Computer Forensics Investigation Process

Question

The rule of thumb when shutting down a system is to pull the power plug. However, it has certain drawbacks. Which of the following would that be?

Options

  • AAny data not yet flushed to the system will be lost
  • BAll running processes will be lost
  • CThe /tmp directory will be flushed
  • DPower interruption will corrupt the pagefile

How the community answered

(35 responses)
  • A
    91% (32)
  • C
    6% (2)
  • D
    3% (1)

Explanation

Abruptly cutting power (pulling the plug) bypasses the normal OS shutdown sequence, which has two key drawbacks: (A) Any data held in memory buffers or write caches that has not yet been flushed to disk will be permanently lost, and (B) all running processes are instantly killed without any opportunity to save state or complete cleanup routines. While the /tmp directory clearing (C) is actually a benefit, and pagefile corruption (D) is possible but not the primary concern, options A and B represent the most significant and reliable drawbacks from a forensic and data-integrity standpoint.

Topics

#System Shutdown#Data Loss#Data Integrity#RAM

Community Discussion

No community discussion yet for this question.

Full 312-49 Practice