Digital › Module 5 › Lesson 5
Quiz — Memory
10 APPLY items on Volatility, process artifacts, and memory order on $DFIR_LAB.
Opening
Memory Literacy — Module Quiz
Ten APPLY items. Name memory forensics literacy on YOUR $DFIR_LAB — never unauthorized live capture, fabricated process evidence, or volatile-order excuses without authority. Original Cyberlium. Next: Network and Logs.
Knowledge Check
APPLY: Volatility literacy helps by:
Multiple choice
Knowledge Check
APPLY: True or False: Memory order prioritizes volatile sources before power-off when safe and authorized.
True or False
Knowledge Check
APPLY: Process artifacts include:
Multiple choice
Knowledge Check
APPLY: Tutorial live-captures roommate laptop RAM — you:
Multiple choice
Knowledge Check
APPLY: Wrong OS profile in Volatility typically causes:
Multiple choice
Knowledge Check
APPLY: Fabricating process cmdline evidence is:
Multiple choice
Knowledge Check
APPLY: Cyberlium NEVER allows:
Multiple choice
Knowledge Check
APPLY: True or False: Memory findings should be corroborated with disk or logs when possible.
True or False
Knowledge Check
APPLY: chmod 600 on memory notes means:
Multiple choice
Knowledge Check
APPLY: Next module after this quiz:
Multiple choice
Answer all 10 knowledge checks to continue. (0/10 answered)