A First Responder Needs to Collect Digital Evidence from a Compromised

question 413

Multiple Choice

A first responder needs to collect digital evidence from a compromised headless virtual host. Which of the following should the first responder collect FIRST?

• A) Virtual memory
• B) BIOS configuration
• C) Snapshot
• D) RAM

---

Definitions:

Expected Loss

The anticipated amount of loss a party faces in a financial transaction or investment, calculated based on probable scenarios.

Secure Neighborhood

An area with enhanced safety measures, possibly including gated access, security personnel, and surveillance systems, aimed at reducing crime.

Insurance Premium

The amount paid periodically to an insurance company by the insured for covering their risk.

Adverse Selection

A situation in which one party in a transaction has more or better information than the other, leading to an imbalance and potentially unfavorable outcomes.