Câu 61: 312-49V11: Computer Hacking Forensic Investigator

Derrick, a forensic specialist, was investigating an active computer that was executing various processes. Derrick wanted to check whether this system was used in an incident that occurred earlier. He started inspecting and gathering the contents of RAM, cache, and DLLs to identify incident signatures. Identify the data acquisition method employed by Derrick in the above scenario.

1. A. Dead data acquisition
2. B. Non-volatile data acquisition
3. C. Static data acquisition
4. D. Live data acquisition — đáp án hiện tại