QUESTION: Gavin has been tasked with collecting several types of forensic information from a system involved in a security incident. With one of the choices below lists the preferred order in which he should collect this evidence, from first to last?
- RAM first, then virtual memory, then SSD, and finally backups
- Virtual memory come first followed by RAM, SSD, and backups
- RAM first, then virtual memory, then backups, and wrapping up with SSD
- Virtual memory, then move to RAM, then backups, and then SSD
Click To View The Answer
Interested in more practice test questions?
Try my Deluxe CertMike Practice Tests that simulate the real-world exam environment and provide you with a detailed PDF scan report as well as a live review session with Mike. Tests are available for the CISSP, Security+,
Get a copy of my official CertMike Practice Test books for the Security+, CISSP, and ISC2 CC exams.