From which evidence source did Waylon collect data that persists even when the system is shut down?

Study for the EC-Council Digital Forensics Essentials (DFE) Test. Enhance your skills with multiple choice questions, each with detailed hints and explanations. Get ready to ace your exam!

The correct choice is archival media because it refers to a type of storage that is designed for long-term retention of data. Archival media retains data even after the system is powered down and is specifically used to store information that is not regularly accessed but needs to be preserved for future reference. This could include forms of data storage such as magnetic tapes, optical discs, or cloud storage solutions that are intended to keep information safe over an extended period.

In contrast, while a USB drive, flash drive, and hard disk can also retain data after shutdown, they are typically used for more immediate and active storage purposes rather than providing the long-term preservation characteristic of archival media. Archival media is specifically built with the intent of ensuring that the data remains intact and accessible over time, making it the most appropriate source for data persistence discussed in the question.

Subscribe

Get the latest from Examzify

You can unsubscribe at any time. Read our privacy policy