EC-Council
312-49V11 · Question #1
312-49V11 Question #1: Real Exam Question with Answer & Explanation
Sign in or unlock 312-49V11 to reveal the answer and full explanation for question #1. The question stem and answer options stay visible for context.
Question
Detective Sarah, a skilled digital forensics investigator, begins probing a compromised computer system linked to a cybercrime ring. Prioritizing volatile data, she meticulously plans her evidence- collection strategy. Amidst the investigation, various data sources emerge, each holding potential clues to unraveling the illicit scheme. Which data source should you prioritize for collection, considering the order of volatility outlined in the RFC 3227 guidelines?
Options
- ADisk or other storage media containing potentially critical files
- BTemporary file systems where recent activity might be stored
- CArchival media such as a DVD-ROM or a CD-ROM
- DThe physical configuration and network topology of the system
Unlock 312-49V11 to see the answer
You've previewed enough free 312-49V11 questions. Unlock 312-49V11 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.