Discuss GAQM CFA-001 Exam Topic 4 Question 125

Volatile information can be easily modified or lost when the system is shut down or rebooted. It helps to determine a logical timeline of the security incident and the users who would be responsible.

ATrue

BFalse

Suggested Answer: A

Get Premium CFA-001 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

24 comments · newest first

Marnie 5 days ago

Right! Without it, we lose context.

Tiffiny 10 days ago

Definitely A. Helps identify responsible users.

Stephaine 15 days ago

I feel like this is a tricky question.

Hannah 20 days ago

True, it can complicate investigations.

Adolph 26 days ago

Still, the main point stands. It’s about immediate data loss.

Rocco 1 month ago

But what if it’s backed up elsewhere?

Herminia 1 month ago

Agreed! It’s crucial for incident timelines.

Brandon 1 month ago

I think it's A) True. Volatile info is lost on reboot.

Glen 2 months ago

Same here, A) True makes sense.

Cherri 2 months ago

I feel confident about this question.

Paz 2 months ago

True, helps identify responsible users too.

Aretha 2 months ago

Not really, once it's gone, it's gone.

Rana 2 months ago

But isn’t some volatile data recoverable?

Alishia 2 months ago

Agreed, A) True. It’s crucial for incident timelines.

Arthur 3 months ago

I think it's A) True. Volatile info is lost on reboot.

Ryann 3 months ago

Wait, so all that data just vanishes? That’s wild!

Nada 3 months ago

Definitely true, it can really complicate investigations.

Norah 3 months ago

I’m not so sure about that, isn’t some volatile data recoverable?

Fabiola 3 months ago

Totally agree, it’s crucial for incident timelines!

Rosalind 3 months ago

True, volatile info disappears on reboot.

Clay 4 months ago

I feel like this is similar to a question we had on memory types. I think volatile info can be lost, but it does play a role in incident analysis.

Benedict 4 months ago

I’m a bit confused here. Does volatile information really help with timelines, or is it just too temporary to be reliable?

Viola 4 months ago

I remember a practice question about volatile memory and its role in forensics. I think it supports the idea that it helps determine responsibility.

Azzie 4 months ago

I think volatile information is crucial for understanding the timeline, but I'm not sure if it can be easily lost.

GAQM CFA-001 Exam - Topic 4 Question 125 Discussion