Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

GIAC Exam GASF Topic 1 Question 20 Discussion

Actual exam question for GIAC's GASF exam
Question #: 20
Topic #: 1
[All GASF Questions]

What type of acquisition is being examined in the image below?

Show Suggested Answer Hide Answer
Suggested Answer: D

backed up. The file manifest.mbdb contains a list of data stored in the backup. The file status.plist contains details about the backup including a flag to identify the backup type, date and version. The file notes.sqlite is an android file that contains notes written by the user on the device.


by Delmy at Dec 12, 2023, 06:07 PM

Limited Time Offer

25%

Off

Get Premium GASF Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel
Ming
3 days ago
I'm pretty sure this is a Blackberry logical acquisition. The device looks like a Blackberry, and the question mentions 'acquisition', so option B must be the right choice.
upvoted 0 times
...
Loren
5 days ago
That's definitely an Android physical acquisition. The image shows a mobile device with an Android OS, so option C is the correct answer.
upvoted 0 times
...
Dudley
14 days ago
I'm not sure, but I think it could also be Blackberry logical.
upvoted 0 times
...
Domonique
16 days ago
I agree with Reita, the image looks like it's examining Android physical acquisition.
upvoted 0 times
...
Reita
17 days ago
I think it's Android physical.
upvoted 0 times
...

Save Cancel