MENU
The device pictured below is in Download Mode to attempt a physical acquisition.
What can be ascertained by viewing the Android boot screen below?
Suggested Answer: C
Get Premium GASF Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
https://www.digitalforensics.com/blog/physical-acquisition-of-a-locked-android-device/
22 comments · newest first
FR
Franklyn
2 days ago
I’m leaning towards A. It looks unrooted to me.
AN
Andra
7 days ago
I think it’s C. The factory ROM is booting.
LA
Lauran
12 days ago
A is a good point. Rooting changes everything.
PR
Precious
17 days ago
I lean towards C. Factory ROM indicates stability.
LO
Loreta
22 days ago
D makes sense. Original ROM can be modified.
NI
Nina
28 days ago
B seems unlikely. Devices usually get modified.
MA
Maricela
1 month ago
I feel like A could be true too. Not rooted means safer.
PH
Phyliss
1 month ago
I think it's C. The factory ROM is booting.
TI
Timothy
1 month ago
Surprised this is even possible without a full history of the device!
AL
Alesia
2 months ago
Wait, how can we be sure about the ROM changes?
SA
Sage
2 months ago
A) The Android is not rooted for sure!
JO
Jovita
2 months ago
I disagree, it could have been modified before.
GI
Gilberto
2 months ago
Looks like the device is in Download Mode, so definitely not rooted.
IR
Irma
2 months ago
I’m not convinced, this could be misleading.
SH
Shannan
2 months ago
A) is correct, no signs of rooting here.
MA
Mammie
3 months ago
Wait, how can we be sure about the ROM changes?
GE
Gerald
3 months ago
I disagree, it could have been modified before.
EM
Emilio
3 months ago
Looks like the device is in Download Mode, so definitely not rooted.
NI
Nickolas
3 months ago
I recall that if the device is in Download Mode, it doesn't necessarily confirm if it's rooted or not. I think option A could be misleading.
JO
Johnna
3 months ago
I’m a bit confused. Does the presence of Download Mode mean the original ROM is still intact? I thought it could indicate modifications too.
GA
Galen
4 months ago
I think I came across a similar question where we had to determine if a device was modified based on its boot screen. I feel like option D might be the right choice here.
TH
Theresia
5 months ago
I remember studying that Download Mode indicates the device is ready for flashing, but I'm not sure how that relates to rooting.