Multiple Choice
Which of the following is NOT an artifact that will be irrevocably lost if the computer is shut down?
A) Running processes
B) Open network ports
C) Data stored in memory
D) System date and time
Correct Answer:
Verified
Correct Answer:
Verified
Related Questions
Q21: When surveying the crime scene for hardware,
Q22: A sound forensic practice is to make
Q23: If possible, prior to entering a crime
Q24: At a crime scene, digital evidence will
Q25: The updated ACPO recommendation for seizing a
Q27: Which of the following is NOT one
Q28: Chain of custody documents record who handled
Q29: Under independent component doctrine, if a computer
Q30: The _documentation specifies who handled the evidence,
Q31: "dd" is the only way to make