CompTIA
SY0-501 · Question #133
Drag and Drop Questions A forensic analyst is asked to respond to an ongoing network attack on a server. Place the items in the list below in the correct order in which the forensic analyst should pre
Sign in or unlock SY0-501 to reveal the answer and full explanation for question #133. The question stem and answer options stay visible for context.
Submitted by rania.sa· Mar 4, 2026CompTIA Security+ / CySA+ - Incident Response: Utilize appropriate forensic procedures including the order of volatility when preserving digital evidence during an investigation.
Question
Drag and Drop Questions A forensic analyst is asked to respond to an ongoing network attack on a server. Place the items in the list below in the correct order in which the forensic analyst should preserve them. Answer:
Exhibits
Answer Area
Drag items
RAMCPU cacheSwapHard drive
Unlock SY0-501 to see the answer
You've previewed enough free SY0-501 questions. Unlock SY0-501 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#Digital Forensics#Order of Volatility#Incident Response#Evidence Preservation