Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

GIAC Exam GASF Topic 6 Question 26 Discussion

Actual exam question for GIAC's GIAC Advanced Smartphone Forensics exam
Question #: 26
Topic #: 6
[All GIAC Advanced Smartphone Forensics Questions]

When examining a file system acquisition of an Android device Which artifact must be carved out manually?

Show Suggested Answer Hide Answer
Suggested Answer: C

by My at Apr 10, 2024, 09:32 PM

Limited Time Offer

25%

Off

Get Premium GASF Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel
Dorian
10 days ago
Ugh, I hate these questions where they try to catch you out. Why can't they just ask about something normal, like recovering WhatsApp messages or something?
upvoted 0 times
...
Kelvin
12 days ago
I bet it's deleted images. That's the kind of thing that would require manual carving, right? The other options seem too straightforward.
upvoted 0 times
...
Evette
13 days ago
Wait, are we sure we're even looking at the right file system? This could be a trick question about some obscure Android artifact that nobody knows about.
upvoted 0 times
...
Elvis
14 days ago
Phone numbers? Really? That seems way too simple. There's gotta be more to it than that.
upvoted 0 times
...
Rosina
16 days ago
Hmm, I'm leaning towards SMS messages. Those seem like they'd be a bit trickier to get at than the other options.
upvoted 0 times
...
Pamela
17 days ago
This is a tricky question! I'm not sure if I should go with the obvious answer of deleted images, or if there's some hidden gotcha here.
upvoted 0 times
...

Save Cancel