Which type of digital evidence is at GREATEST risk of being lost if not captured in a timely manner?

The correct answer is D. Cached data. Cached data is at the greatest risk of being lost if not captured in a timely manner. Cached data is often stored temporarily on devices and can be overwritten or deleted as the system continues to operate or as space is needed. Unlike text messages, social media posts, or…

Submitted by marco_it· Apr 18, 2026Protection of Information Assets

Question

Options

AText messages
BSocial media posts
CInternet browsing history
DCached data

How the community answered

(39 responses)

A
3% (1)
B
3% (1)
C
5% (2)
D
90% (35)

Explanation

Cached data is at the greatest risk of being lost if not captured in a timely manner. Cached data is often stored temporarily on devices and can be overwritten or deleted as the system continues to operate or as space is needed. Unlike text messages, social media posts, or internet browsing history (which are typically stored more persistently), cached data can be easily lost if not captured quickly during a forensic investigation.

Topics

#Digital Evidence#Evidence Volatility#Incident Response#Data Preservation

Community Discussion

No community discussion yet for this question.

Full CISA Practice