A Member of a Digital Forensics Team, Joe Arrives at a Crime

question 638

Multiple Choice

A member of a digital forensics team, Joe arrives at a crime scene and is preparing to collect system data. Before powering the system off, Joe knows that he must collect the most volatile date first. Which of the following is the correct order in which Joe should collect the data?

• A) CPU cache, paging/swap files, RAM, remote logging data
• B) RAM, CPU cache. Remote logging data, paging/swap files
• C) Paging/swap files, CPU cache, RAM, remote logging data
• D) CPU cache, RAM, paging/swap files, remote logging data

---

Definitions:

Quantitative Measures

Metrics or data points that can be quantified numerically to assess performance, trends, or changes over time.

Asset Purchases

Transactions involving the acquisition of physical or intangible assets that are expected to generate economic benefits for the business.

Capital Investment Decisions

Decisions made by businesses regarding large financial investments in projects or assets, considering future benefits and costs to maximize profitability.

Income Tax

A tax levied by the government directly on income, especially an annual tax on personal income.