Logical Operations Exam CFR-210 Topic 2 Question 70 Discussion

Actual exam question for Logical Operations's CFR-210 exam

Question #: 70
Topic #: 2

A suspicious laptop is found in a datacenter. The laptop is on and processing data, although there is no application open on the screen. Which of the following BEST describes a Windows tool and technique that an investigator should use to analyze the laptop's RAM for working applications?

ANet start and Network analysis

BRegedit and Registry analysis

CTask manager and Application analysis

DVolatility and Memory analysis

Show Suggested Answer

Suggested Answer: B

by Leonor at Aug 06, 2024, 01:55 AM

Limited Time Offer

25%

Off

Get Premium CFR-210 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Christiane

9 days ago

Hmm, I think option D is the way to go. Volatility is the tool for memory analysis, and that's exactly what we need to look for those sneaky running applications.

upvoted 0 times

...