An Incident Responder Is Preparing to Acquire Images and Files

question 240

Multiple Choice

An incident responder is preparing to acquire images and files from a workstation that has been compromised. The workstation is still powered on and running. Which of the following should be acquired LAST?

• A) Application files on hard disk
• B) Processor cache
• C) Processes in running memory
• D) Swap space

---

Definitions:

Binding Problem

A neurological puzzle concerning how the brain integrates features perceived by different sensory modalities into a single, cohesive perception.

Nature-Nurture

The debate concerning the relative importance of an individual's innate qualities ("nature") versus personal experiences ("nurture") in determining or causing differences in physical and behavioral traits.

Mind-Brain

A term often used to describe the relationship or connection between mental processes and brain activity.

Binding Problem

A concept in neuroscience and psychology regarding how the brain integrates multiple sensory attributes to produce a unified perception of an object.