Exam 312-49v11 Topic 1 Question 66 Discussion

Actual exam question for EC-COUNCIL's 312-49v11 exam
Question #: 66
Topic #: 1
Derrick, a forensic specialist, was investigating an active computer that was executing various processes. Derrick wanted to check whether this system was used In an Incident that occurred earlier. He started Inspecting and gathering the contents of RAM, cache, and DLLs to Identify Incident signatures. Identify the data acquisition method employed by Derrick in the above scenario.

Suggested Answer: C Vote an answer

by vilcsi.mark at Jun 26, 2025, 05:28 AM

Limited Time Offer

15%

Off

Get Premium 312-49v11 Questions as Interactive Self Test Engine or PDF

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Nick name: Submit Cancel
xlim398
2025-12-09 11:19:08
Selected Answer: A
ram = volatile
upvoted 1 times
...
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
0
0
0
10