During an Investigation, a Security Analyst Identified Machines That Are

question 120

Multiple Choice

During an investigation, a security analyst identified machines that are infected with malware the antivirus was unable to detect. Which of the following is the BEST place to acquire evidence to perform data carving?

• A) The system memory
• B) The hard drive
• C) Network packets
• D) The Windows Registry

---

Definitions:

Common Stock

Equity shares of a corporation, representing ownership interest and giving shareholders voting rights and dividends.

Dividends

Payments made by a corporation to its shareholder members, distributing profits.

Price-Earnings Ratio

A valuation metric for stocks, calculated by dividing the market price per share by the earnings per share, indicating how much investors are willing to pay per dollar of earnings.

Stockholders' Equity

The residual interest in the assets of a corporation after deducting liabilities, representing the owners' equity.