GAQM CFA-001 Exam - Topic 4 Question 125 Discussion

Actual exam question for GAQM's CFA-001 exam

Question #: 125
Topic #: 4

Volatile information can be easily modified or lost when the system is shut down or rebooted. It helps to determine a logical timeline of the security incident and the users who would be responsible.

ATrue

BFalse

Show Suggested Answer

Suggested Answer: A

by Lizbeth at Jun 30, 2026, 02:01 AM

Limited Time Offer

25%

Off

Get Premium CFA-001 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Alishia

2 days ago

Agreed, A) True. It’s crucial for incident timelines.

upvoted 0 times

...

Arthur

7 days ago

I think it's A) True. Volatile info is lost on reboot.

upvoted 0 times

...

Ryann

12 days ago

Wait, so all that data just vanishes? That’s wild!

upvoted 0 times

...

Nada

17 days ago

Definitely true, it can really complicate investigations.

upvoted 0 times

...

Norah

22 days ago

I’m not so sure about that, isn’t some volatile data recoverable?

upvoted 0 times

...

Fabiola

27 days ago

Totally agree, it’s crucial for incident timelines!

upvoted 0 times

...

Rosalind

1 month ago

True, volatile info disappears on reboot.

upvoted 0 times

...

Clay

1 month ago

I feel like this is similar to a question we had on memory types. I think volatile info can be lost, but it does play a role in incident analysis.

upvoted 0 times

...

Benedict

1 month ago

I’m a bit confused here. Does volatile information really help with timelines, or is it just too temporary to be reliable?

upvoted 0 times

...

Viola

2 months ago

I remember a practice question about volatile memory and its role in forensics. I think it supports the idea that it helps determine responsibility.

upvoted 0 times

...

Azzie

2 months ago

I think volatile information is crucial for understanding the timeline, but I'm not sure if it can be easily lost.

upvoted 0 times

...