EC-Council
312-49V11 · Question #51
312-49V11 Question #51: Real Exam Question with Answer & Explanation
Sign in or unlock 312-49V11 to reveal the answer and full explanation for question #51. The question stem and answer options stay visible for context.
Question
An investigator is analyzing a suspect's computer in connection with a corporate espionage case. The investigator needs to gather all relevant data from the device, including any provisional information that may provide insights into recent user actions. While investigating, the investigator discovers that the system has stored a variety of data from previous user activities, including text, images, and links that were recently copied. Which type of volatile data is the investigator examining in this situation?
Options
- AExamining data related to resources shared across the network for potential evidence.
- BExamining driver/service information for system-level configurations.
- CExamining print spool files for information related to printing operations.
- DExamining the clipboard contents for information temporarily held during user interaction.
Unlock 312-49V11 to see the answer
You've previewed enough free 312-49V11 questions. Unlock 312-49V11 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.