GIAC GASF Exam - Topic 6 Question 19 Discussion

Actual exam question for GIAC's GASF exam

Question #: 19
Topic #: 6

As part of your analysis of a legacy BlackBerry device, you examine the installed applications list and it appears that no third-party applications were installed on the device. Which other file may provide you with additional information on applications that were accessed with the handset?

ABlackBerry NV Items

BContent Store

CEvent logs

DBBThumbs.dat

Show Suggested Answer

Suggested Answer: D

by Nu at Nov 24, 2023, 06:51 AM

Limited Time Offer

25%

Off

Get Premium GASF Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Annelle

8 months ago

Not sure if NV Items would have anything useful.

upvoted 0 times

...

Aleisha

9 months ago

I’m surprised there are no third-party apps at all!

upvoted 0 times

...

Antonio

9 months ago

BBThumbs.dat? Really? That seems off.

upvoted 0 times

...

Arlyne

9 months ago

I think the Content Store could help too.

upvoted 0 times

...

Dahlia

9 months ago

Event logs might show app usage!

upvoted 0 times

...

Marti

9 months ago

BBThumbs.dat sounds familiar, but I can't recall if it relates to app access or just media files.

upvoted 0 times

...

Tyra

10 months ago

I practiced a question similar to this, and I think the event logs are definitely worth considering for tracking app activity.

upvoted 0 times

...

Sunshine

10 months ago

I'm not entirely sure, but I feel like the Content Store could have some info on apps that were accessed, even if they weren't installed.

upvoted 0 times

...

Stefany

10 months ago

I remember studying the different types of logs on BlackBerry devices, and I think event logs might show app usage.

upvoted 0 times

...

Lezlie

10 months ago

The event logs seem like a good place to start. They might contain information about which apps were accessed, even if they weren't installed.

upvoted 0 times

...

Ivan

10 months ago

I'm a bit unsure about this one. I'll need to review my notes on BlackBerry forensics to see if I can recall anything about these different file types.

upvoted 0 times

...

Pearline

10 months ago

I'm pretty confident the answer is BlackBerry NV Items. That sounds like it could be a file that tracks usage and access of different applications on the device.

upvoted 0 times

...

Salina

10 months ago

Okay, let's see. The question mentions that no third-party apps were installed, so I'm guessing the answer might be related to some kind of system or log file.

upvoted 0 times

...

Dana

10 months ago

Hmm, this seems like a tricky one. I'll need to think carefully about the different file types that could contain information on accessed applications.

upvoted 0 times

...

Ezekiel

10 months ago

Hmm, I'm not totally sure about the differences between VLAN scanning and VLAN detection. I'll need to think this through carefully.

upvoted 0 times

...

Dulce

10 months ago

This question seems straightforward. Barney is focused on minimizing the use of offline data storage, so the answer is likely C. Retention.

upvoted 0 times

...

Erasmo

10 months ago

I'd say the key is in the early stages, when you're trying to understand the problem and explore potential solutions broadly. Option C touches on that, so that's the one I'm leaning towards.

upvoted 0 times

...

Kami

1 year ago

Content Store? Is that where I can buy more apps to crash my BlackBerry? I'm going with Event logs, the classic choice.

upvoted 0 times

Erick

1 year ago

Yeah, Event logs are a classic option for this type of analysis.

upvoted 0 times

...

Rosio

1 year ago

I think Event logs is a good choice too. It can give us more insight.

upvoted 0 times

...

Lynna

1 year ago

Event logs may provide information on applications accessed with the handset.

upvoted 0 times

...

Kayleigh

1 year ago

BlackBerry NV Items? Sounds like a secret government codename. I'll take the 'Event logs' and call it a day!

upvoted 0 times

Micheline

1 year ago

Event logs could reveal some interesting details about the device.

upvoted 0 times

...

Jerry

1 year ago

I prefer checking the Event logs for more information.

upvoted 0 times

...

Nelida

1 year ago

I think BlackBerry NV Items might have some hidden secrets.

upvoted 0 times

...

Bok

1 year ago

BBThumbs.dat? What is this, a photo album? I'm sticking with Event logs as the correct answer.

upvoted 0 times

Arlyne

1 year ago

Yeah, Event logs are the way to go for tracking application usage on the device.

upvoted 0 times

...

Soledad

1 year ago

I agree, Event logs would be the most useful in this scenario.

upvoted 0 times

...

Jill

1 year ago

I think Event logs is the best option to check for application activity.

upvoted 0 times

...

Lorriane

1 year ago

Event logs would definitely provide more information on accessed applications.

upvoted 0 times

...

Paris

1 year ago

Content Store? Really? I doubt that would have the details we're looking for. Event logs for the win!

upvoted 0 times

...

Meghann

1 year ago

BlackBerry NV Items? Sounds a bit too technical. I'm going with the good old Event logs.

upvoted 0 times

Vallie

1 year ago

Definitely. Event logs can be a useful resource in this situation.

upvoted 0 times

...

Victor

1 year ago

That's true. It's a good choice for finding out more about the device's activity.

upvoted 0 times

...

Hollis

1 year ago

Event logs can provide valuable information on applications accessed on the device.

upvoted 0 times

...

Joanne

1 year ago

Event logs

upvoted 0 times

...

Stefany

1 year ago

Hmm, the Event logs sound like the most likely source of additional information on accessed applications. That's my pick!

upvoted 0 times

...

Torie

1 year ago

I'm not sure, but I think D) BBThumbs.dat could also provide information on accessed applications.

upvoted 0 times

...

Veda

1 year ago

I agree with Lili, event logs would show the applications accessed.

upvoted 0 times

...

Lili

1 year ago

I think the answer is C) Event logs.

upvoted 0 times

...