You have been called to the scene of a crime. One of the rooms on the premises has been set up as a small home office. The computer is running, You have a warrant to seize the computer, so your team gets ready to pack it up and haul it away. What is the proper approach?
a. Leave the device running until a determination is made whether or not to capture live memory.
b. Pull the plug. You want to keep temporary files intact.
c. The lead investigator has determined there will be no need for live memory capture. So you gracefully shut the machine down in order to avoid corrupting the OS.
d. You never move the computer system until after it has been imaged.
a.
You might also like to view...
To combine data from more than one table, you need to create a(n) ________ between the tables
Fill in the blank(s) with correct word
Under fixed-partition multiprogramming, ________ occurs when a memory partition is larger than the memory and data of the process currently loaded into it.
a) compaction b) garbage collection c) internal fragmentation d) external fragmentation
________ can copy filtered information to a new location
Fill in the blank(s) with correct word
Compare the Update automatically and Fixed date options for slide footers. Give an example of when each would be used.
What will be an ideal response?