GIAC GASF Exam Actual Questions

Name: GIAC Advanced Smartphone Forensics
Brand: QA4Exam
SKU: GASF
Price: 30 USD
Availability: InStock
Rating: 5.0 (405 reviews)

The questions for GASF were last updated on Oct 3, 2024.

Viewing page 1 out of 15 pages.
Viewing questions 1-5 out of 75 questions

Unlock Access to All 75 Questions & Answers

Question No. 1

Which iOS backup file will contain the last time the device was backed up?

Anotes.sqlite

Bmanifest.mbdb

Cstatus.plist

Dinfo.plist

Show Answer

Correct Answer: D

backed up. The file manifest.mbdb contains a list of data stored in the backup. The file status.plist contains details about the backup including a flag to identify the backup type, date and version. The file notes.sqlite is an android file that contains notes written by the user on the device.

Question No. 2

Review the information contained within the Viber application running on an Android device. Which of the

following can be determined?

AA message containing the string 8901260572525158741 was sent using the Viber application.

BThe Viber account used to send/receive messages can be tied to the user in possession of the SIM card with an IMSI of 8901260572525158741

CThe user account for Viber is 8901260572525158741

DThe Viber account used to send/receive messages can be tied to the user in possession of the SIM card with an ICCID of 8901260572525158741

Show Answer

Correct Answer: D

it is important to know how many digits make up an ICCID versus an IMSI. ICCIDs are comprised of 19 to 20 digits whereas IMSIs may only contain 14 or 15.

Question No. 3

What is the essential piece of information is most often required in order to decrypt the contents of BlackBerry OS 10 handsets?

ABlackBerry Blend username/pin

BBlackBerry Balance username/password

CBlackBerry Link ID/password

DBBM pin

Show Answer

Correct Answer: C

Question No. 4

While analysis in BlackBerry application list it appears that no third-party applications were installed on the device. Which other file may provide you with additional information on applications that were accessed with the handset?

ABlackBerry NV Items

BContent Store

CEvent logs

DBBThumbs.dat

Show Answer

Correct Answer: C

Question No. 5

When examining a file system acquisition of an Android device Which artifact must be carved out manually?

ADeleted images

BContacts

CSMS messages

DPhone numbers

Show Answer

Correct Answer: C

Unlock All Questions for GIAC GASF Exam

Full Exam Access, Actual Exam Questions, Validated Answers, Anytime Anywhere, No Download Limits, No Practice Limits

Get All 75 Questions & Answers