GIAC GASF Exam Practice Test Instant Access

Question 1

What is the extension used for BlackBerry 10 backup files?

A.APK

B.BBB

C.ZIP

D.IPD

Answer : B

Question 2

Cellebrite's Physical Analyzer will conduct a Quick Scan for images, which goes through and carves files that may have been deleted from the device. When carving for image files, which of the following methods is most effectively used to recover data?

AUpdate the signature database

BCarve based on file header

CCarve based on file metadata

DCarve based on memory ranges

Answer : B

Question 3

What is the MAIN difference between a Full Root and a Shell/Soft Root?

AFull root is permanent

BFull root Leaves traces behind on the device

CSoft root Allows system level access without a password

DSoft root Utilizes Shell root

Answer : C

Question 4

What will happen when a user creates an encrypted backup of their personal iPhone on their work computer then later performs a backup to their personal computer at home?

AThe user will not be able to create the backup until they have deleted the original on their work computer

BThe user will be required to enter a new backup password on their personal computer

CThe user will be required to enter their backup password to start the backup process

DThe user will not need to enter a password on the personal computer

Answer : C

Question 5

What are the three components that make up the International Mobile Subscriber Identity (IMSI)?

AMobile Station International Subscriber Directory Number (MSISDN), Mobile Network Code (MNC), Mobile
Station Identification Number (MSIN)

BSubscriber Identity Module (SIM), Mobile Station International Subscriber Directory Number (MSISDN),
Mobile Network Code (MNC)

CMobile Country Code (MCC), Mobile Network Code (MNC), Mobile Station Identification Number (MSIN)

DMobile Country Code (MCC), Mobile Station International Subscriber Directory Number (MSISDN),
Integrated Circuit Card Identification (ICCID)

Answer : C

Question 6

What information can be concluded by examining this XML file extracted from an Android device?

ASkype was installed but not utilized on the device

BA Skype account was configured and accessed on this device

CSkype was launched but a profile was not created

DA user logged into Skype with a temporary guest profile

Answer : B

Question 7

Which file, found natively on most Android devices, will contain location history such as coordinates, physical addresses and timestamps?

A/data/data/com.google.android.apps.maps/databases/da_destination_history

B/data/data/com.google.android.apps.maps/databases/search_history.db

C/data/data/com.google.android.location/files/DATA_Preferences

D/data/data/com.vznavigator.ADR6300/databases/NIMSTORE .db

Answer : B

com.google.android.apps.maps/databases/da_destination_history&source=bl&ots=-KA8ikP4r&

sig=IM_QC11zGF73P3zi8Ds9LQb2eW8&hl=en&sa=X&ved=0ahUKEwjcrObe4J7aAhXENJoKHdSLCP0

Q6AEILzAB#v=onepage&q=data%2Fdata%2Fcom.google.android.apps.maps%2Fdatabases%

2Fda_destination_history&f=false

GIAC Advanced Smartphone Forensics Exam Practice Test