GIAC
GCFE · Question #25
What is the primary use of 'live data acquisition' in digital forensics?
The correct answer is A. To capture system data that is volatile and would be lost upon shutdown or reboot, such as RAM. See the full explanation below for the reasoning.
Question
What is the primary use of 'live data acquisition' in digital forensics?
Options
- ATo capture system data that is volatile and would be lost upon shutdown or reboot, such as RAM
- BTo monitor real-time network traffic for anomalies.
- CTo log changes in user account settings.
- DTo track installation of new applications.
How the community answered
(30 responses)- A73% (22)
- B3% (1)
- C7% (2)
- D17% (5)
Community Discussion
No community discussion yet for this question.