ExamTopics Logo
Mail Us[email protected]
Menu
Comptia Discussions
exam questions

Exam SY0-501 All Questions

View all questions & answers for the SY0-501 exam
Go to Exam

Exam SY0-501 topic 1 question 198 discussion

Actual exam question from CompTIA's SY0-501
Question #: 198
Topic #: 1
[All SY0-501 Questions]

A member of a digital forensics team, Joe arrives at a crime scene and is preparing to collect system data. Before powering the system off, Joe knows that he must collect the most volatile date first.
Which of the following is the correct order in which Joe should collect the data?

  • A. CPU cache, paging/swap files, RAM, remote logging data
  • B. RAM, CPU cache. Remote logging data, paging/swap files
  • C. Paging/swap files, CPU cache, RAM, remote logging data
  • D. CPU cache, RAM, paging/swap files, remote logging data
Show Suggested Answer Hide Answer
Suggested Answer: D 🗳️
by Elb at Jan. 22, 2020, 5:54 a.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
Elb
Highly Voted 5 years, 3 months ago
Following is the order of volatility of digital information in a system: CPU, cache, and register contents (collect first) Routing tables, ARP cache, process tables, kernel statistics Live network connections and data flows Memory (RAM) Temporary file system/swap space Data on hard disk Remotely logged data Data stored on archival media/backups (collect last) A swap file, sometimes called a page file or paging file, is space on a hard drive used as a temporary location to store information when RAM is fully utilized. By using a swap file, a computer can use more memory than what is physically installed in the computer So, Answer is D.
upvoted 17 times
...
who__cares123456789___
Most Recent 4 years, 4 months ago
Answer is correct...please move on....
upvoted 2 times
...
vaxakaw829
4 years, 9 months ago
https://blogs.getcertifiedgetahead.com/cfr-and-order-of-volatility/
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago