Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

GIAC GASF Exam - Topic 4 Question 70 Discussion

When examining the iOS device shown below the tool indicates that there are 4 chat messages recovered from the device.Which of the following locations may contain additional chat information?
B) Databases installed and maintained by the application
A) Memory ranges from a physical dump of the device
C) Internet history plist files found in logical acquisitions
D) IP connections used by the application

GIAC GASF Exam - Topic 4 Question 70 Discussion

Actual exam question for GIAC's GASF exam
Question #: 70
Topic #: 4
[All GASF Questions]

When examining the iOS device shown below the tool indicates that there are 4 chat messages recovered from the device.

Which of the following locations may contain additional chat information?

Show Suggested Answer Hide Answer
Suggested Answer: B

by Tonette at Jun 19, 2026, 02:05 AM

Limited Time Offer

25%

Off

Get Premium GASF Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Jodi
3 days ago
Databases hold more chat data.
upvoted 0 times
...
Cherri
8 days ago
Why B?
upvoted 0 times
...
Jodi
13 days ago
I think B is the best choice.
upvoted 0 times
...
Jeffrey
19 days ago
Totally agree with B, it's the most reliable source!
upvoted 0 times
...
Luis
24 days ago
Wait, are we sure about D? That sounds a bit off.
upvoted 0 times
...
Rocco
29 days ago
C seems unlikely, but you never know.
upvoted 0 times
...
Denise
1 month ago
I think A could have some hidden gems too!
upvoted 0 times
...
Maia
1 month ago
Definitely B, those app databases usually hold a lot more info.
upvoted 0 times
...
Elden
1 month ago
IP connections seem less likely to contain chat info, so I would probably rule out option D.
upvoted 0 times
...
Nilsa
2 months ago
I think I saw a similar question about internet history before, but I'm not convinced that option C is the best answer here.
upvoted 0 times
...
Eun
2 months ago
I'm not entirely sure, but I feel like memory dumps could also hold relevant data, maybe option A?
upvoted 0 times
...
Maira
2 months ago
I remember studying about app databases, so I think option B might be a good choice for additional chat info.
upvoted 0 times
...

Save Cancel