Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

GIAC Exam GASF Topic 6 Question 26 Discussion

Actual exam question for GIAC's GIAC Advanced Smartphone Forensics exam
Question #: 26
Topic #: 6
[All GIAC Advanced Smartphone Forensics Questions]

When examining a file system acquisition of an Android device Which artifact must be carved out manually?

Show Suggested Answer Hide Answer
Suggested Answer: C

Comments

Rosina
12 hours ago
Hmm, I'm leaning towards SMS messages. Those seem like they'd be a bit trickier to get at than the other options.
upvoted 0 times
...
Pamela
2 days ago
This is a tricky question! I'm not sure if I should go with the obvious answer of deleted images, or if there's some hidden gotcha here.
upvoted 0 times
...

Save Cancel