GIAC GASF Exam - Topic 5 Question 28 Discussion

Actual exam question for GIAC's GASF exam

Question #: 28
Topic #: 5

An analyst is investigating files on a Nokia S60 Symbian device and looking for data that would contain

possible cell tower locations, date and time stamps, phone numbers and/or references to files saved on the device. Which of the follow files would contain user data that was created and stored on the device that meet this criteria?

AMapView.r08

BLifeblogCOUNTRYSTRINGS.r1 3

CLifeblog.db

DPbkView.r03

Show Suggested Answer

Suggested Answer: C

by Lizbeth at May 02, 2024, 07:23 AM

Limited Time Offer

25%

Off

Get Premium GASF Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Vilma

7 months ago

Totally agree, Lifeblog.db is the best bet here!

upvoted 0 times

...

Blythe

7 months ago

Wait, can LifeblogCOUNTRYSTRINGS.r13 really hold that data?

upvoted 0 times

...

Jesus

8 months ago

Not sure about PbkView.r03, seems less relevant.

upvoted 0 times

...

Staci

8 months ago

I think MapView.r08 might have location info too.

upvoted 0 times

...

Tomas

8 months ago

Lifeblog.db definitely has user data!

upvoted 0 times

...

Lashandra

8 months ago

I feel like PbkView.r03 might have some phone numbers, but I'm not confident about its relevance to timestamps or tower locations.

upvoted 0 times

...

Mammie

9 months ago

I practiced a similar question where we had to identify files containing user data, and Lifeblog.db stood out as a likely candidate again.

upvoted 0 times

...

Socorro

9 months ago

I'm not entirely sure, but I think MapView.r08 could have location data since it sounds like it relates to maps.

upvoted 0 times

...

Cristy

9 months ago

I remember that Lifeblog.db is often used for storing user-generated content, so it might have the data we're looking for.

upvoted 0 times

...

Louvenia

9 months ago

This is a good opportunity to apply my knowledge of mobile forensics. I'll focus on identifying the file that is most likely to contain the user data the analyst is looking for, based on the information provided.

upvoted 0 times

...

Tijuana

9 months ago

I'm a bit confused by the file names and descriptions. I'll need to do some research on the Symbian operating system and the types of files it uses to make sure I understand what each of these options represents.

upvoted 0 times

...

Nan

9 months ago

Hmm, I'm not entirely sure about this one. I'll need to carefully review the file names and descriptions to determine which one would contain the relevant user data.

upvoted 0 times

...

Ben

9 months ago

This looks like a pretty straightforward question. I'm confident I can figure this out based on the information provided.

upvoted 0 times

...

Jonelle

9 months ago

Okay, let's think this through step-by-step. The question is asking for files that would contain cell tower locations, date/time stamps, phone numbers, and references to files saved on the device. I'll need to evaluate each option carefully to see which one best fits those criteria.

upvoted 0 times

...

Francoise

9 months ago

I'm a bit confused by the options here. Are any of these tools specifically designed for cloud incident response? I'll have to guess and hope for the best.

upvoted 0 times

...

Pearline

9 months ago

Okay, let's see... I'm pretty sure it has something to do with access permissions, but I'm not sure which one is the right answer. I'll have to read the options closely.

upvoted 0 times

...