Eccouncil Exam 712-50 Topic 5 Question 90 Discussion

Actual exam question for Eccouncil's 712-50 exam

Question #: 90
Topic #: 5

When performing a forensic investigation, what are the two MOST common data sources for obtaining evidence from a computer and mobile devices?

ARAM and unallocated space

BUnallocated space and RAM

CSlack space and browser cache

DPersistent and volatile data

Show Suggested Answer

Suggested Answer: D

by Gertude at Aug 29, 2024, 04:01 AM

Limited Time Offer

25%

Off

Contribute your Thoughts:

Submit Cancel

8 days ago

I think the two most common data sources are RAM and unallocated space.

upvoted 0 times

...

11 days ago

D) Persistent and volatile data, of course. I mean, what else would you need in a forensic investigation? Duh!

upvoted 0 times

...

13 days ago

Hmm, I'm pretty sure it's RAM and unallocated space. Got to love those hidden data goldmines!

upvoted 0 times

...