EC-Council
312-49V11 · Question #18
312-49V11 Question #18: Real Exam Question with Answer & Explanation
Sign in or unlock 312-49V11 to reveal the answer and full explanation for question #18. The question stem and answer options stay visible for context.
Question
As part of a digital investigation, a forensic expert needs to analyze a server suspected of hosting illicit content. The server has multiple volumes and partitions. To proceed with the analysis, the investigator needs to gather evidence from a location on the server where user files, documents, and system metadata are typically stored. Which of the following storage locations should the investigator primarily focus on for this purpose?
Options
- AVolatile memory stores temporary data.
- BExternal backup devices store data but may not always contain relevant information.
- CNetwork storage systems may require additional access controls.
- DNon-volatile storage retains data even when powered off.
Unlock 312-49V11 to see the answer
You've previewed enough free 312-49V11 questions. Unlock 312-49V11 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.