Exam GCIH All QuestionsBrowse all questions from this exam
Question 148

The tools and techniques used in memory analysis closely resembles which other type of investigation?

    Correct Answer: D

    Memory analysis involves examining a computer's volatile memory to extract information about current processes, open network connections, and loaded modules, which resembles the techniques used in disk forensics. Both types of investigations focus on extracting data and analyzing it, albeit from different types of memory (volatile for memory analysis and non-volatile for disk forensics).

Discussion
korruptsystemsOption: C

Correct answer: C

Vikt0rOption: D

Correct answer is DMemory Analysis: Involves the examination of a computer's volatile memory (RAM) to extract information about running processes, open network connections, loaded modules, and other runtime data. Focuses on the live state of the system and provides insights into the current activities and state of the system. Disk Forensics: Involves the examination of non-volatile storage devices such as hard drives or solid-state drives to recover and analyze data. Focuses on persistent data stored on disks, including file systems, deleted files, and artifacts that remain over time.