CHFI Practice Questions - Computer Hacking Forensic Investigator (CHFI V11, 312-49) Exam

According to the order of volatility, which data should an investigator collect FIRST during live acquisition?

Files on the local hard disk Archived backup tapes CPU registers and cache Routing table on a router

Correct Answer:

CPU registers and cache

Access more questions from this quiz

Continue to CHFI Practice Questions - Computer Hacking Forensic Investigator (CHFI v11, 312-49) Exam for more practice questions and the full quiz experience.

Access More Questions