GASF試験無料問題集（75題）「GIAC Advanced Smartphone Forensics 認定」

出題：1

Which artifact(s) can be extracted from a logical image only if the device the image was acquired from was jailbroken?

A. Call Logs

B. Photos

C. SMS/MMS

D. Email

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：2

Which of the following files contains details regarding the encryption state of an iTunes backup file?

A. Manifest.mbdb

B. Manifest.plist

C. Keychain-backup.plist

D. Status.plist

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：3

An analyst investigating a Nokia S60 Symbian device wants to know if an Adobe Flash file on the handset is compromised.

Which file in the image will best target the Adobe Flash files?

A. saflash.r01

B. FLASHLITE.sis

C. OnlinePrint.sis

D. flashliteplugin.r03

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：4

Where are iOS Class keys stored?

A. In iCloud

B. Between the flash memory and the system area on the device

C. In effacable storage

D. Within the metadata of each file

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：5

Which of the following operating systems are used by Blackberry 10 and found in some vehicles and medical devices?

A. POSIX

B. Bada

C. UNIX

D. QNX

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：6

During the forensic analysis of a Nokia Symbian phone, you receive a SD card with files in the Nokia\Content Copier folder. What data is present to examine?

A. Logon credentials

B. User created images

C. Backup files

D. Encryption keys

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：7

Which of the following files provides the most accurate reflection of the device's date/timestamp related to the last device wipe?

A. /private/var/mobile/Library/AddressBook/AddressBook.sqlitedb

B. /private/var/mobile/Applications/com.viber/Library/Prefernces/com.viber.plist

C. /private/var/mobile/Applications/com.apple.mobilesafari/Library/history.db

D. /private/var/mobile/Applications/net.whatsapp.WhatsApp/Library/pw.dat

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：8

Analyze the two tables (Albums and Photos) provided from the Facebook database on an Android device located at the path: /data/data/com.facebook.katana/databases/fb.db.

Which photo was added to Facebook by the user of the device?

A. 100006274086300_1073741835

B. 100003042564055_1073741835

C. 100005241790123_1073741832

D. 106716779501997_1073741827

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

GASF試験無料問題集「GIAC Advanced Smartphone Forensics 認定」