Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

GIAC GASF Exam - Topic 4 Question 70 Discussion

When examining the iOS device shown below the tool indicates that there are 4 chat messages recovered from the device.Which of the following locations may contain additional chat information?
B) Databases installed and maintained by the application
A) Memory ranges from a physical dump of the device
C) Internet history plist files found in logical acquisitions
D) IP connections used by the application

GIAC GASF Exam - Topic 4 Question 70 Discussion

Actual exam question for GIAC's GASF exam
Question #: 70
Topic #: 4
[All GASF Questions]

When examining the iOS device shown below the tool indicates that there are 4 chat messages recovered from the device.

Which of the following locations may contain additional chat information?

Show Suggested Answer Hide Answer
Suggested Answer: B

by Tonette at Jun 19, 2026, 02:05 AM

Limited Time Offer

25%

Off

Get Premium GASF Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Nilsa
2 days ago
I think I saw a similar question about internet history before, but I'm not convinced that option C is the best answer here.
upvoted 0 times
...
Eun
7 days ago
I'm not entirely sure, but I feel like memory dumps could also hold relevant data, maybe option A?
upvoted 0 times
...
Maira
12 days ago
I remember studying about app databases, so I think option B might be a good choice for additional chat info.
upvoted 0 times
...

Save Cancel