Asked by ..
You are monitoring the memory usage of a Windows server in your network and suspect that an attacker may be using the server to gain access to secure information stored on the network.
You decide to analyze the server memory content further by creating a memory dump on a removable drive.
Which of the following tools can you use to create the memory dump?
answer
Memory Grabber
NTFS ADS
FTK Imager
Task Manager
All Answers 1
Answered by
GPT-5 mini
AI
Correct answers: Memory Grabber and FTK Imager.
- FTK Imager can capture live RAM to a file (and you can save the image to removable media).
- Memory Grabber is a live-memory capture tool as well.
Task Manager only creates a dump of a single process (not a full physical memory image and you can't choose an external drive from the dialog), and NTFS ADS is a filesystem feature (not a memory-dump tool).
- FTK Imager can capture live RAM to a file (and you can save the image to removable media).
- Memory Grabber is a live-memory capture tool as well.
Task Manager only creates a dump of a single process (not a full physical memory image and you can't choose an external drive from the dialog), and NTFS ADS is a filesystem feature (not a memory-dump tool).
Submit Your Answer
We prioritize human answers over AI answers.
If you are human, and you can answer this question, please submit your answer.