問題詳情
13.In which of the following areas is evidence most likely to be lost if acompromised system is shut down before evidence collection is complete?
(A)Raw disk blocks
(B) Memory contents
(C) File system information
(D) USB drivers
參考答案
答案：[無官方正解]
難度：計算中-1
書單：沒有書單，新增