nerdexam
EC-Council

312-49V9 · Question #113

When collecting evidence from the RAM, where do you look for data?

The correct answer is A. Swap file. See the full explanation below for the reasoning.

Question

When collecting evidence from the RAM, where do you look for data?

Options

  • ASwap file
  • BSAM file
  • CData file
  • DLog file

How the community answered

(33 responses)
  • A
    73% (24)
  • B
    6% (2)
  • C
    6% (2)
  • D
    15% (5)

Community Discussion

No community discussion yet for this question.

Full 312-49V9 Practice