CompTIA
SY0-501 · Question #148
When performing data acquisition on a workstation, which of the following should be captured based on memory volatility? (Select TWO).
Sign in or unlock SY0-501 to reveal the answer and full explanation for question #148. The question stem and answer options stay visible for context.
Submitted by parkjh· Mar 4, 2026Security operations
Question
When performing data acquisition on a workstation, which of the following should be captured based on memory volatility? (Select TWO).
Options
- AUSB-attached hard disk
- BSwap/pagefile
- CMounted network storage
- DROM
- ERAM
Unlock SY0-501 to see the answer
You've previewed enough free SY0-501 questions. Unlock SY0-501 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#data acquisition#memory volatility#RAM#pagefile