GCIH Exam QuestionsBrowse all questions from this exam

GCIH Exam - Question 148


The tools and techniques used in memory analysis closely resembles which other type of investigation?

Show Answer
Correct Answer: BD

Memory analysis involves examining a computer's volatile memory to extract information about current processes, open network connections, and loaded modules, which resembles the techniques used in disk forensics. Both types of investigations focus on extracting data and analyzing it, albeit from different types of memory (volatile for memory analysis and non-volatile for disk forensics).

Discussion

2 comments
Sign in to comment
korruptsystemsOption: C
Jan 8, 2023

Correct answer: C

Vikt0rOption: D
Dec 7, 2023

Correct answer is DMemory Analysis: Involves the examination of a computer's volatile memory (RAM) to extract information about running processes, open network connections, loaded modules, and other runtime data. Focuses on the live state of the system and provides insights into the current activities and state of the system. Disk Forensics: Involves the examination of non-volatile storage devices such as hard drives or solid-state drives to recover and analyze data. Focuses on persistent data stored on disks, including file systems, deleted files, and artifacts that remain over time.