If the computer has an encrypted drive, a ____ acquisition is done if the password or passphrase is available.
A) passive
B) static
C) live
D) local

Question

Quizplus · Accepted Answer

A live acquisition is done when the computer is turned on and actively running, allowing for the extraction of volatile data from the system's memory. If the password or passphrase is available, a live acquisition can be used to access the encrypted drive. Passive and static acquisitions do not involve accessing the live system and are not applicable in this scenario. Local is not related to the type of acquisition being performed.

If the Computer Has an Encrypted Drive, a ____ Acquisition