Skillset can help you prepare! Sign up for your free Skillset account and take the first steps towards your certification.
Which of these is an important source when forensically examining a Windows host?
Swap space
Slack space
Unallocated clusters
All of these
What are the definitions? Swap Space = "...a dedicated disk partition that is used to extend the amount of available memory" CISSP Study Guide 3rd ed pp. 124-125. Slack space = "This unused space is referred to as file slack space, and it may hold residual data such as portions of deleted files." - NIST SP800-86, AUG 2006, p. 4-5
Train with Skillset and pass your certification exam. Faster. Guaranteed.
Study thousands of practice questions that organized by skills and ranked by difficulty.
Create a tailored training plan based on the knowledge you already possess.
Know when you’re ready for the high-stakes exam. Have the confidence that you will pass on your first attempt.