When performing a forensic investigation, what are the two MOST common data sources for obtaining evidence from a computer and mobile devices?

A. RAM and unallocated space

B. Unallocated space and RAM

C. Slack space and browser cache

D. Persistent and volatile data








 

Suggested Answer: D



Reference:
https://study.com/academy/lesson/data-storage-formats-digital-forensics-devices-types.html


This question is in 712-50 EC-Council Certified CISO (CCISO) Exam
For getting EC-Council Certified CISO (CCISO) Certificate




Disclaimers:
The website is not related to, affiliated with, endorsed or authorized by EC-Council.
Trademarks, certification & product names are used for reference only and belong to EC-Council.
The website does not contain actual questions and answers from EC-Council's Certification Exam.