最新的GIAC Certification認證 GASF考試題庫

問題1

What is a risk to the security of an iPhone backup if the user selects to set a password and encrypt their backup?

A. The clear text password will be cached in the user's keychain and can be recovered searching the user's keychain

B. The data is encrypted using a strong key but the password is saved to a file which is encoded using Base64, which is easily reversible

C. The keychain is not captured with the backup and the password can be recovered from the Info.plist file

D. The backup file is encrypted and a copy of the keychain is saved in a local file which may be attacked using brute force tools

正確答案: D

說明：（僅 VCESoft 成員可見）

問題2

When examining a file system acquisition of an Android device Which artifact must be carved out manually?

A. Contacts

B. Deleted images

C. Phone numbers

D. SMS messages

正確答案: D

問題3

Which of the following items is found in the Kernel Space for an iOS device?

A. Applications

B. Core Services

C. System Area

D. Cocoa Touch framework

正確答案: D

說明：（僅 VCESoft 成員可見）

問題4

An analyst is reviewing the contents of a media card that was found without an associated device. Based on the image below, with which mobile device is it most likely that this device was once paired?

A. Legacy BlackBerry

B. Nokia device running Symbian OS

C. Android smartphone

D. Chinese Knock-off

正確答案: A

說明：（僅 VCESoft 成員可見）

問題5

What information can be concluded by examining this XML file extracted from an Android device?

A. Skype was launched but a profile was not created

B. A Skype account was configured and accessed on this device

C. Skype was installed but not utilized on the device

D. A user logged into Skype with a temporary guest profile

正確答案: B

說明：（僅 VCESoft 成員可見）

問題6

As part of your analysis of a legacy BlackBerry device, you examine the installed applications list and it appears that no third-party applications were installed on the device. Which other file may provide you with additional information on applications that were accessed with the handset?

A. Content Store

B. BlackBerry NV Items

C. BBThumbs.dat

D. Event logs

正確答案: D

說明：（僅 VCESoft 成員可見）

問題7

When conducting forensic analysis of an associated media card, one would most often expect to find this particular file system format?

A. HFS

B. FAT

C. Yaffs2

D. NTFS

正確答案: B

問題8

Which cloud based system can be utilized by Android owners to backup user data?

A. Samsung Kies

B. Google

C. Android Device Manager

D. Amazon Web Services (AWS)

正確答案: B

說明：（僅 VCESoft 成員可見）

最新的GIAC Advanced Smartphone Forensics - GASF免費考試真題

最新更新

站內鏈接

聯系我們