[&] _________ is the most volatile type of evidence, while _________ is the least.
- Memory, Physical disks
- Registers & Cache, Backups
- Logs, Disk
- Temporary File Systems, Logs

[&] Documentation is the process of recording relevant findings
- FALSE
- TRUE