Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

GIAC GASF Exam - Topic 1 Question 20 Discussion

Posted by Delmy on Dec 12, 2023 at 06:07 PM

What type of acquisition is being examined in the image below?

Suggested Answer: D

backed up. The file manifest.mbdb contains a list of data stored in the backup. The file status.plist contains details about the backup including a flag to identify the backup type, date and version. The file notes.sqlite is an android file that contains notes written by the user on the device.


Get Premium GASF Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test
38 comments · newest first
NO
Nohemi 10 months ago
Wait, is that really how iOS bypass works?
MA
Marshall 11 months ago
I thought Blackberry was still a thing?
CA
Catarina 11 months ago
Not so sure, could be Android physical too.
DA
Darrin 11 months ago
Totally agree, definitely iOS!
KR
Kristin 11 months ago
Looks like an iOS bypass lock to me.
MA
Marguerita 11 months ago
I’m confused between Android physical and Windows Mobile file system. I wish I had reviewed those distinctions more thoroughly!
WY
Wynell 12 months ago
I’m leaning towards Blackberry logical, but I can’t recall the specific details. It’s been a while since we went over that.
MI
Mitzie 12 months ago
I remember practicing a question similar to this, but it was about Android. I feel like the image could be misleading.
JA
Janna 12 months ago
I think this might be an iOS bypass lock, but I'm not entirely sure. We did cover that in class, right?
SA
Sarina 1 year ago
This seems like a straightforward mobile forensics question. Based on the options, I'm leaning towards Android physical acquisition as the correct answer, but I'll double-check the details in the image to be sure.
NI
Nidia 1 year ago
I'm feeling a bit lost on this one. Mobile device forensics isn't my strongest area, so I'll need to take my time and really think through the options before making a guess.
MA
Magda 1 year ago
Okay, the image shows some kind of mobile device interface, so I'm guessing this is testing our knowledge of different mobile OS acquisition methods. I'll try to remember the key differences between logical, physical, and other types of mobile forensic techniques.
AL
Alton 1 year ago
Hmm, I'm not too familiar with mobile device forensics. I'll have to read through the options carefully and see if I can spot any clues in the image that might help me narrow it down.
WI
Willard 1 year ago
This looks like a mobile device forensics question. I'll need to carefully examine the image and options to determine the type of acquisition being tested.
XU
Xuan 1 year ago
Hmm, I'm a bit unsure about this one. The question mentions a "full backup" and "service-level down time," but I'm not sure which backup technique that corresponds to. I'll have to think this through carefully.
CH
Chanel 1 year ago
Hmm, I'm not sure about this one. I'd have to think more about how the different software categories might interact with the Traps agent. Maybe I should review the material on Traps and its potential conflicts.
AL
Alethea 1 year ago
iOS bypass lock? Really? This is clearly an Android device, so option A is completely off the mark. C'mon, guys, pay attention to the image!
SH
Shakira 1 year ago
↳ replying to Alethea
Thanks for pointing that out. Android physical is the correct acquisition type for this image.
JE
Jerrod 1 year ago
↳ replying to Alethea
I agree, option A, iOS bypass lock, doesn't make sense at all. Android physical is the way to go.
MA
Maile 1 year ago
↳ replying to Alethea
You're right, it's definitely an Android device. Option C, Android physical, is the correct choice.
LA
Latricia 1 year ago
Haha, I think the correct answer is Windows Mobile file system. I mean, who even uses Windows Mobile anymore? That's got to be the funniest option here.
LY
Lynette 1 year ago
↳ replying to Latricia
B) Blackberry logical
DA
Dallas 1 year ago
↳ replying to Latricia
Really? I thought it was iOS bypass lock.
DU
Dulce 1 year ago
↳ replying to Latricia
C) Android physical
JA
Jade 1 year ago
↳ replying to Latricia
Haha, I think the correct answer is Windows Mobile file system. I mean, who even uses Windows Mobile anymore? That's got to be the funniest option here.
TA
Tamra 1 year ago
↳ replying to Latricia
D) Windows Mobile file system
MA
Matthew 1 year ago
↳ replying to Latricia
C) Android physical
ME
Merissa 1 year ago
↳ replying to Latricia
B) Blackberry logical
SA
Samira 1 year ago
↳ replying to Latricia
A) iOS bypass lock
MI
Ming 1 year ago
I'm pretty sure this is a Blackberry logical acquisition. The device looks like a Blackberry, and the question mentions 'acquisition', so option B must be the right choice.
DE
Dean 1 year ago
↳ replying to Ming
Yes, and the term 'logical acquisition' fits with the context of the question.
AL
Aleisha 1 year ago
↳ replying to Ming
I agree, it does look like a Blackberry device in the image.
WI
Wilburn 1 year ago
↳ replying to Ming
I agree, it looks like a Blackberry logical acquisition.
GR
Grover 1 year ago
↳ replying to Ming
I think it's Android physical.
LO
Loren 1 year ago
That's definitely an Android physical acquisition. The image shows a mobile device with an Android OS, so option C is the correct answer.
DU
Dudley 2 years ago
I'm not sure, but I think it could also be Blackberry logical.
DO
Domonique 2 years ago
I agree with Reita, the image looks like it's examining Android physical acquisition.
RE
Reita 2 years ago
I think it's Android physical.
0/2000 characters

Save Cancel