GCFA: GIAC Certified Forensic AnalystDemo

By GIAC · Question Mode

QuestionQ17

Introduction to Memory Forensics

John is a Technical Support Executive at ABC Inc. The company network has ten computers, all running Windows XP Professional. John is using a computer on which he has enabled hibernation. He shuts down the computer by using hibernation mode. What happens to the data after the system is powered off through hibernation?

  • A Data will be saved automatically before the system is switched off.
  • B Data will be stored on the ROM.
  • C Data will be saved before the system is switched off if you have configured hibernation to save data.
  • D Unsaved data will be lost when hibernation switches off the system.
Explanation

Hibernation saves the current system state from memory to the hard disk before power is turned off, allowing the session and open work to be restored when the computer starts again.

Community Discussion

No comments yet. Be the first to start the discussion!