Cap 7 English

Which of the following are sources of RAM?

Choose what applies.

• Physical memory

• Pagefile.mem

• Swap file.page

• ROM

Which file is created when the computer goes to sleep?

• Page file.sys

• Swap file.sys

• Hiberfill.sys

• Hibernation.sys

When should you capture RAM?

• Every hour

• Every week

• Every digital forensic investigation

• When you deem it important

In general, how many items do you need in order to collect RAM?

• 1

• 2

• 3

• 4

DumpIt is a GUI tool.

• True

• False

It is acceptable to install DumpIt on the suspect computer.

• True

• False

Which of the following are analysis tools?

• DumpIt

• FTK Imager

• Volatility

• MD5 hash

Which of the following is a volatile memory?

• Hard Disk Drive (HDD)

• Solid State Drive (SSD)

• RAM

• ROM

What is the primary purpose of RAM in a computer?

• To store permanent data

• To execute programs and store temporary data

• To backup data

• To manage network connections

Which of the following is a non-volatile memory?

• RAM

• Cache

• ROM

• Register