Question

1.
2.
3.
4.
Answer (Detailed Solution Below)

Option 4 : it holds transient evidence - running processes, encryption keys, network connections - that vanishes on shutdown

Advertisement

Detailed Solution

सही उत्तर it holds transient evidence - running processes, encryption keys, network connections - that vanishes on shutdown है।

Key Points
Helpful?
PrepSnapprepsnap.in • Part -A

Question:

Referring to the passage given above, the team preserved volatile memory from the servers chiefly because:

1.
it would speed up the restoration of patient records
2.
it is required before any backup can be restored
3.
it proves that the ransom note was genuine
4.
it holds transient evidence - running processes, encryption keys, network connections - that vanishes on shutdown

Correct Answer: it holds transient evidence - running processes, encryption keys, network connections - that vanishes on shutdown

Volatile (RAM) evidence is lost when a machine powers down, so live memory must be captured first under the order of volatility. It does not speed up restoration.

Downloaded from PrepSnap (prepsnap.in)