nerdexam
IISFA

II0-001 · Question #59

The MS Windows swap file is useful to an investigator because

The correct answer is C. It allows forensic utilities to review what was in memory at the time of an abnormal shutdown. You've hit your session limit · resets 5:20pm (America/New_York)

Question

The MS Windows swap file is useful to an investigator because

Options

  • AIt allows forensic utilities to operate more efficiently
  • BIt allows forensic utilities to have a work area for large memory pages
  • CIt allows forensic utilities to review what was in memory at the time of an abnormal shutdown
  • DIt allows forensic utilities to operate in a virtual mode

How the community answered

(32 responses)
  • A
    3% (1)
  • B
    9% (3)
  • C
    84% (27)
  • D
    3% (1)

Explanation

You've hit your session limit · resets 5:20pm (America/New_York)

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full II0-001 Practice