GASF Practice Test

GASF Practice Test practice questions, page 3 of 3, with answer review and explanations.

Question 11

Which of the following is required in addition to the Apple ID of the custodian to access IOS backup files that are stored in ICloud?

  1. iTunes password
  2. Device passcode
  3. Manifest.plist
  4. Keychain-backup.plist

Question 12

In 2015, Apples iTunes store was found to be hosting several malicious applications that were infected as a result of hacked version of the developer toolkit used to create applications. Which Apple developer suite was targeted?

  1. Xcode
  2. ADB
  3. Momentics IDE
  4. Xamarin

Question 13

An Android device user is known to use Facebook to communicate with other parties under examination. There is no evidence of the Facebook application on the phone. If there was Facebook usage where would an examiner expect to find these artifacts?

  1. com.android.chrome/app_chrome/Default/Local Storage
  2. dmappmgr.db
  3. /data/system/packages.xml
  4. AndroidManifest.xml

Question 14

Physical Analyzer provides a function to narrow down a search based on a timestamp, a type, a party or date. What is the name of this advanced searching capability?

  1. Watchlist Editor
  2. Tags
  3. Timeline
  4. Event of Interest