(Choose 1 answer)
☐ A
Пс
☐ D
ΠΕ
Back
Next
DIFLUORE
the exam
Which evidence is most volatile first?
A. None of the mentioned
B. Routing table, ARP cache, process table, kernel statistics
C. Data on hard disk
D. Temporary fie system/swap space
E. CPU, cache, and register content
