EC-Council
312-49V9 · Question #512
Ivanovich, a forensics investigator, is trying to extract complete information about running processes from a system. Where should he look apart from the RAM and virtual memory?
The correct answer is A. Swap space. See the full explanation below for the reasoning.
Question
Ivanovich, a forensics investigator, is trying to extract complete information about running processes from a system. Where should he look apart from the RAM and virtual memory?
Options
- ASwap space
- BApplication data
- CFiles and documents
- DSlack space
How the community answered
(28 responses)- A75% (21)
- B14% (4)
- C7% (2)
- D4% (1)
Community Discussion
No community discussion yet for this question.