Discussion
Which of the following storage media typically exhibits the highest volatility in digital evidence ?
Answer: C
The most volatile is the CPU cache.
Evidence is collected in order of volatility, most short-lived first. RFC 3227, the standard guideline, puts CPU registers and cache at the top: their contents change in nanoseconds as the processor runs. Next come routing and ARP tables, the process table and main memory (RAM), then temporary file systems, disks, remote logs and archival media.
RAM is volatile too, but its contents last as long as the power and survive for seconds or more, so it comes after cache. An SSD is persistent storage, and network logs are stored records, both near the bottom of the order.
Post your comment
Please log in or register to post a comment.
Examination Categories
- SSC Exams
- Banking Exams
- Teaching Exams
- Civil Services Exams
- Railways Exams
- Engineering Recruitment Exams
- Defence Exams
- State Government Exams
- Police Exams
- Insurance Exams
- Nursing Exams
- Other Government Exams
- NRA CET
- PG Entrance Exams
- Campus Placement
- MBA Entrance Exams
- CUET and UG Entrance
- Judiciary Exams
- Regulatory Body Exams
- Software Development