IISFA Exam II0-001 Topic 3 Question 85 Discussion

Actual exam question for IISFA's II0-001 exam

Question #: 85
Topic #: 3

[All II0-001 Questions]

The MS Windows swap file is useful to an investigator because

AIt allows forensic utilities to operate more efficiently

BIt allows forensic utilities to have a work area for large memory pages

CIt allows forensic utilities to review what was in memory at the time of an abnormal shutdown

DIt allows forensic utilities to operate in a virtual mode

Show Suggested Answer

Suggested Answer: C

by Nancey at Apr 23, 2024, 01:57 AM

Limited Time Offer

25%

Off

Contribute your Thoughts:

Submit Cancel

11 days ago

I'm not sure, but I think D could also be a possibility.

upvoted 0 times

...

11 days ago

The swap file is definitely useful for reviewing memory contents during an abnormal shutdown. Option C is the way to go!

upvoted 0 times

...

16 days ago

I agree with Paris, C makes sense because it helps review what was in memory.

upvoted 0 times

...

22 days ago

I think the answer is C.

upvoted 0 times

...