When performing data acquisition on a workstation, which of the following should be captured based on memory volatility? (Choose two.)
A . USB-attached hard disk
B . Swap/pagefile
C . Mounted network storage
D . ROM
E . RAM
Answer: BE
Latest SY0-501 Dumps Valid Version with 1130 Q&As
Latest And Valid Q&A | Instant Download | Once Fail, Full Refund