Question $3(1$ point$)$

What distinguishes live data acquisition from dead data acquisition in forensic

investigations?

Live data acquisition collects only volatile data, while dead data acquisition

collects only nonvolatile data.

Live data acquisition is performed after shutting down the suspect machine,

while dead data acquisition is performed while the suspect machine is still

powered on$.$

Live data acquisition involves collecting data from devices connected to the

internet, while dead data acquisition involves collecting data from offline

devices.

Live data acquisition involves collecting data from powered$-$on devices, while

dead data acquisition involves collecting data from devices that are powered off.