GIAC GASF
Q: 1
Where are iOS Class keys stored?
Options
Q: 2
In addition to the device passcode, what other essential piece of information is most often required
in order to decrypt the contents of BlackBerry OS 10 handsets?
Options
Q: 3
Where would an examiner find evidence of an iOS update to device from one version to another?
Options
Q: 4
Exhibit:
Where can an analyst find data to provide additional artifacts to support the evidence in the
highlighted file?
Where can an analyst find data to provide additional artifacts to support the evidence in the
highlighted file?Options
Q: 5
Which of the following can most forensics tools crack on an iOS device?
Options
Q: 6
Review the sample database.
What is the BLOB column storing for this particular database table?
What is the BLOB column storing for this particular database table?Options
Q: 7
When analyzing the WhatsApp timestamp “1461184912” in iOS what timestamp conversion should
be used?
Options
Q: 8
An analyst investigating a Nokia S60 Symbian device wants to know if an Adobe Flash file on the
handset is compromised.
Which file in the image will best target the Adobe Flash files?
Which file in the image will best target the Adobe Flash files?Options
Q: 9
Which file type below is commonly associated with locational data and is an export option from
within
Cellebrite Physical Analyzer and XRY to provide detailed visual output of geographic information?
Options
Q: 10
Examine the file, Bluetooth, what is the name of the device being examined?
Options
Question 1 of 10
