Are you studying for the CEH certification?
Skillset can help you prepare! Sign up for your free Skillset account and take the first steps towards your certification.
Skillset can help you prepare! Sign up for your free Skillset account and take the first steps towards your certification.
During a forensic investigation, which of the following data sources is least likely to be contaminated due to its inherent non-volatile nature?
RAID cache
Hard drive
Registers
RAM
Volatile:- storage loses its content when power is removed from the resource. i.e. RAM.
Nonvolatile: Storage does not depend upon the presence of power to maintain its contents. i.e. Magnetic/optical media and NVRAM. (HDD) SOURCE: Sybex Offical study guide 7th ed.
Also See: OOV (Order of Volatility) archived media like magnetic tapes and hard copies are the least volatile, while network tables and caches are typically most volatile. Volatility is determined based on how often data on a particular medium is altered or lost.
Train with Skillset and pass your certification exam. Faster. Guaranteed.
Study thousands of practice questions that organized by skills and ranked by difficulty.
Create a tailored training plan based on the knowledge you already possess.
Know when you’re ready for the high-stakes exam. Have the confidence that you will pass on your first attempt.