ISC2 CC Business Continuity, DR & Incident Response Practice Question
During an incident, an organization needs to preserve volatile data. Which of the following should be collected FIRST?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Memory contents
Volatile data is lost when the system loses power. Memory content is the most volatile.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Backup tapes
Why it's wrong here
Backups are non-volatile and can be collected at any time.
- ✓
Memory contents
Why this is correct
Memory is volatile and disappears when the system is turned off.
- ✗
Hard drive contents
Why it's wrong here
Hard drive content is non-volatile and can be imaged later.
- ✗
Network logs
Why it's wrong here
Network logs are typically stored on a server and are less volatile.
Go deeper
Related to this question
Learn chapter
Incident Response and Management
Key term
Incident
An incident is a security event that violates an organization's policies or threatens its data, systems, or operations, requiring a structured response.
Key term
Organization
An Organization is a top-level container in Google Cloud that represents your company or entities and serves as the root node for all your cloud resources, policies, and access control.
About these practice questions
This CC question is part of Courseiva's 976-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CC practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CC exam.