ECCouncil Computer Hacking Forensic Investigator (V9) 312-49v9 Question # 92 Topic 10 Discussion

ECCouncil Computer Hacking Forensic Investigator (V9) 312-49v9 Question # 92 Topic 10 Discussion

312-49v9 Exam Topic 10 Question 92 Discussion:
Question #: 92
Topic #: 10

Ivanovich, a forensics investigator, is trying to extract complete information about running processes from a system. Where should he look apart from the RAM and virtual memory?


A.

Swap space


B.

Application data


C.

Files and documents


D.

Slack space


Get Premium 312-49v9 Questions

Contribute your Thoughts:


Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.