Logical Operations Exam CFR-210 Topic 2 Question 70 Discussion

Actual exam question for Logical Operations's CFR-210 exam

Question #: 70
Topic #: 2

A suspicious laptop is found in a datacenter. The laptop is on and processing data, although there is no application open on the screen. Which of the following BEST describes a Windows tool and technique that an investigator should use to analyze the laptop's RAM for working applications?

ANet start and Network analysis

BRegedit and Registry analysis

CTask manager and Application analysis

DVolatility and Memory analysis

Show Suggested Answer

Suggested Answer: B

by Leonor at Aug 06, 2024, 01:55 AM

Limited Time Offer

25%

Off

Get Premium CFR-210 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Edna

30 days ago

I wonder if the laptop is running Solitaire in the background, just to keep the investigator on their toes. But Volatility is the way to go – it'll uncover those hidden aces in a heartbeat!

upvoted 0 times

...

Shawna

1 months ago

I'm just hoping the laptop doesn't have a virus that makes it start dancing the Macarena. Gotta love those sneaky malware authors! But Volatility is definitely the tool to catch them in the act.

upvoted 0 times

...

Hildred

1 months ago

I bet the culprit is trying to hide their tracks, but Volatility will put them in the spotlight. D all the way, no doubt about it.

upvoted 0 times

...

Leonora

1 months ago

As an investigator, I can't imagine using anything other than Volatility. It's the gold standard for memory forensics. Option D is the clear winner here.

upvoted 0 times

...

Fabiola

1 months ago

Aha! I was just reading about Volatility. It's the perfect tool to dive into that laptop's RAM and uncover any hidden processes. Definitely D for me.

upvoted 0 times

Cyndy

2 days ago

Registry analysis with Regedit could reveal important information as well.

upvoted 0 times

...

Isabelle

9 days ago

I think using Task Manager would also be helpful to analyze running applications.

upvoted 0 times

...

Hillary

19 days ago

I agree, Volatility is a powerful tool for memory analysis.

upvoted 0 times

...

Olga

24 days ago

Task manager can also be useful to see running applications.

upvoted 0 times

...

Lorrie

1 months ago

I agree, Volatility is a powerful tool for memory analysis.

upvoted 0 times

...

Christiane

2 months ago

Hmm, I think option D is the way to go. Volatility is the tool for memory analysis, and that's exactly what we need to look for those sneaky running applications.

upvoted 0 times