GASF Practice Test

GASF Practice Test practice questions, page 2 of 3, with answer review and explanations.

Question 6

An analyst investigating a Nokia S60 Symbian device wants to know if an Adobe Flash file on the handset is compromised. Which file in the image will best target the Adobe Flash files?

  1. FLASHLITE.sis
  2. flashliteplugin.r03
  3. saflash.r01
  4. OnlinePrint.sis

Question 7

As part of your analysis of a legacy BlackBerry device, you examine the installed applications list and it appears that no third-party applications were installed on the device. Which other file may provide you with additional information on applications that were accessed with the handset?

  1. BlackBerry NV Items
  2. Content Store
  3. Event logs
  4. BBThumbs.dat

Question 8

Which artifact must be carved out manually when examining a file system acquisition of an Android device?

  1. Deleted images
  2. Contacts
  3. SMS messages
  4. Phone numbers

Question 9

When conducting forensic analysis of an associated media card, one would most often expect to find this particular file system format?

  1. HFS
  2. NTFS
  3. Yaffs2
  4. FAT

Question 10

Cellebrite Physical Analyzer uses Bit Defender to scan for malware by flagging files who have known bad hash values. This is an example of which type of mobile malware detection?

  1. Specific-based malware detection
  2. Signature-based detection
  3. Behavioral-based detection
  4. Cloud based malware detection