QuestionQ72
Threat Intelligence in Incident ResponseThe following elements are included in the order of volatility for a typical computing system under the RFC 3227 evidence-collection and archiving guidelines:
- Archival media
- Remote logging and monitoring data related to the target system
- Routing table, process table, kernel statistics, and memory
- Registers and processor cache
- Physical configuration and network topology
- Disk or other storage media
- Temporary system files
Identify the correct order of volatility, from most to least volatile, for a typical system.
- A 4−>3−>7−>6−>2−>5−>1
- B 2−>1−>4−>3−>6−>5−>7
- C 4−>3−>7−>1−>2−>5−>6
- D 7−>5−>4−>3−>2−>6−>1
Community Discussion