As an incident responder in your organization, you have been asked to respond to a computer incident. Which of the following will be the correct order of volatility of the data? - Skillset

Are you studying for the CISSP certification?

Skillset can help you prepare! Sign up for your free Skillset account and take the first steps towards your certification.

Upgrade Account

As an incident responder in your organization, you have been asked to respond to a computer incident. Which of the following will be the correct order of volatility of the data?

ARP & route tables, RAM dump, disk image, network log data

network log data, RAM dump, disk image, ARP & route tables

Disk image, RAM dump, ARP & route tables, network log data

RAM dump, disk image, ARP & route tables, network log data

Explanation

According to RFC 3227, Section-2.1, the Order of Volatility is as follows:

registers, cache
routing table, arp cache, process table, kernel statistics, memory
temporary file systems
disk
remote logging and monitoring data
physical configuration, network topology
archival media

Directory

Skillset helps you pass your certification exam.

Contributions and Interactions

Practice Questions

Study thousands of practice questions that organized by skills and ranked by difficulty.

Contributions and Interactions

Personalized Training

Create a tailored training plan based on the knowledge you already possess.

Training Video Selector

Exam Readiness

Know when you’re ready for the high-stakes exam. Have the confidence that you will pass on your first attempt.

Get A Free Skillset Account