GIAC GASF Actual Free Exam Questions & Community Discussion
While conducting forensic analysis of an associated media card, one would most often expect to find this particular file system format?
Correct Answer: D
Vote an answer
What type of storage does an iOS device use for user data?
Correct Answer: D
Vote an answer
Explanation: Only visible for EduDump members. You can sign-up / login (it's free).
Which artifact(s) can be extracted from a logical image only if the device the image was acquired from was jailbroken?
Correct Answer: C
Vote an answer
Explanation: Only visible for EduDump members. You can sign-up / login (it's free).
What does access to iOS DFU mode provide an examiner?
Correct Answer: D
Vote an answer
Explanation: Only visible for EduDump members. You can sign-up / login (it's free).
Which of the following can most forensics tools crack on an iOS device?
Correct Answer: B
Vote an answer
Explanation: Only visible for EduDump members. You can sign-up / login (it's free).
What is the MAIN difference between a Full Root and a Shell/Soft Root?
Correct Answer: C
Vote an answer
Explanation: Only visible for EduDump members. You can sign-up / login (it's free).
An analyst is investigating files on a Nokia S60 Symbian device and looking for data that would contain possible cell tower locations, date and time stamps, phone numbers and/or references to files saved on the device. Which of the follow files would contain user data that was created and stored on the device that meet this criteria?
Correct Answer: D
Vote an answer
Explanation: Only visible for EduDump members. You can sign-up / login (it's free).
What is the essential piece of information is most often required in order to decrypt the contents of BlackBerry OS 10 handsets?
Correct Answer: A
Vote an answer
0
0
0
10