Logical Operations Exam CFR-210 Topic 2 Question 70 Discussion

Actual exam question for Logical Operations's CFR-210 exam

Question #: 70
Topic #: 2

A suspicious laptop is found in a datacenter. The laptop is on and processing data, although there is no application open on the screen. Which of the following BEST describes a Windows tool and technique that an investigator should use to analyze the laptop's RAM for working applications?

ANet start and Network analysis

BRegedit and Registry analysis

CTask manager and Application analysis

DVolatility and Memory analysis

Show Suggested Answer

Suggested Answer: B

by Leonor at Aug 06, 2024, 01:55 AM

Limited Time Offer

25%

Off

Get Premium CFR-210 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Edna

2 months ago

I wonder if the laptop is running Solitaire in the background, just to keep the investigator on their toes. But Volatility is the way to go – it'll uncover those hidden aces in a heartbeat!

upvoted 0 times

...

Shawna

2 months ago

I'm just hoping the laptop doesn't have a virus that makes it start dancing the Macarena. Gotta love those sneaky malware authors! But Volatility is definitely the tool to catch them in the act.

upvoted 0 times

...

Hildred

2 months ago

I bet the culprit is trying to hide their tracks, but Volatility will put them in the spotlight. D all the way, no doubt about it.

upvoted 0 times

Hector

11 days ago

Regedit is not going to help us here, we need to go with Volatility for memory analysis.

upvoted 0 times

...

Roxane

15 days ago

I've heard great things about Volatility for analyzing RAM, definitely the best choice.

upvoted 0 times

...

Launa

20 days ago

Task manager won't cut it, we need something more advanced like Volatility.

upvoted 0 times

...

Gilbert

28 days ago

I agree, using Volatility for memory analysis is crucial in this situation.

upvoted 0 times

...

Leonora

2 months ago

As an investigator, I can't imagine using anything other than Volatility. It's the gold standard for memory forensics. Option D is the clear winner here.

upvoted 0 times

...

Fabiola

2 months ago

Aha! I was just reading about Volatility. It's the perfect tool to dive into that laptop's RAM and uncover any hidden processes. Definitely D for me.

upvoted 0 times

Quentin

29 days ago

Regedit could provide valuable information from the registry as well.

upvoted 0 times

...

Cyndy

1 months ago

Registry analysis with Regedit could reveal important information as well.

upvoted 0 times

...

Isabelle

1 months ago

I think using Task Manager would also be helpful to analyze running applications.

upvoted 0 times

...

Hillary

2 months ago

I agree, Volatility is a powerful tool for memory analysis.

upvoted 0 times

...

Olga

2 months ago

Task manager can also be useful to see running applications.

upvoted 0 times

...

Lorrie

2 months ago

I agree, Volatility is a powerful tool for memory analysis.

upvoted 0 times

...

Christiane

3 months ago

Hmm, I think option D is the way to go. Volatility is the tool for memory analysis, and that's exactly what we need to look for those sneaky running applications.

upvoted 0 times