Free 312-49V10 Web TestEngine Demo

Q42 Single choice

In a scenario where a potential security incident has occurred on a cloud-based service, and an investigator is brought in to examine the system, what type of data acquisition would likely be beneficial in this situation? Also, explain the volatile data type that might be most interesting to the investigator.

A
Live acquisition should be employed to gather dynamic data from the system, concentrating on open les and command history
B
Dead acquisition should be used to collect static data from the system, focusing on slack space and swap files
C
Live acquisition would be advantageous to acquire volatile data, emphasizing data stored on cloud services and unencrypted containers that arc open on the system
D
Dead acquisition should be utilized to capture non-volatile data from the physical hard disk, focusing on unallocated drive space

312-49V10 Web TestEngine demo