Labour Day Special Limited Time 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: geek65

GASF GIAC Advanced Smartphone Forensics Questions and Answers

Questions 4

Exhibit:

Where can an analyst find data to provide additional artifacts to support the evidence in the highlighted file?

Options:

A.

internal.db-wal

B.

browser2.db

C.

sysmon2.db-shm

D.

external.db

Buy Now
Questions 5

What does access to iOS DFU mode provide an examiner?

Options:

A.

Ability to decrypt the SD card of a Symbian device

B.

Ability to acquire the info.mkf file on a Blackberry device and brute force the password

C.

Ability to root an Android device and perform a physical acquisition

D.

Ability to bypass the lock screen of an older iOS device

Buy Now
Questions 6

When conducting forensic analysis of an associated media card, one would most often expect to find this

particular file system format?

Options:

A.

HFS

B.

NTFS

C.

Yaffs2

D.

FAT

Buy Now
Questions 7

What is being shown in the image below?

Options:

A.

An outgoing call that was not answered

B.

A call that was answered but immediately hung up

C.

A missed Skype message on an android device

D.

A call that was answered and lasted 5 seconds

Buy Now
Questions 8

In addition to the device passcode, what other essential piece of information is most often required in order to decrypt the contents of BlackBerry OS 10 handsets?

Options:

A.

BlackBerry Blend username/pin

B.

BlackBerry Balance username/password

C.

BlackBerry Link ID/password

D.

BBM pin

Buy Now
Questions 9

Examine the unpacked Android application below. Which important file, resident in most Android applications, is missing?

Options:

A.

dalvik-cache

B.

classes.dex

C.

com.skype.raider-1.apk

D.

classes-dex2jar.jar

Buy Now
Questions 10

Which of the following is a unique 56 bit number assigned to a CDMA handset?

Options:

A.

Mobile Station International Subscriber Directory Number (MSISDN)

B.

Electronic Serial Number (ESN)

C.

International Mobile Equipment Identifier (IMEI)

D.

Mobile Equipment ID (MEID)

Buy Now
Questions 11

Which of the following is required in addition to the Apple ID of the custodian to access IOS backup files that are stored in ICloud?

Options:

A.

iTunes password

B.

Device passcode

C.

Manifest.plist

D.

Keychain-backup.plist

Buy Now
Exam Code: GASF
Exam Name: GIAC Advanced Smartphone Forensics
Last Update: May 2, 2024
Questions: 75
GASF pdf

GASF PDF

$28  $80
 Add to Cart
GASF Engine

GASF Testing Engine

$33.25  $95
 Add to Cart
GASF PDF + Engine

GASF PDF + Testing Engine

$45.5  $130
 Add to Cart