Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

GIAC GASF Exam - Topic 7 Question 3 Discussion

An Android device user is known to use Facebook to communicate with other parties under examination.There is no evidence of the Facebook application on the phone. If there was Facebook usage where would an examiner expect to find these artifacts?
B) dmappmgr.db
A) com.android.chrome/app_chrome/Default/Local Storage
C) /data/system/packages.xml
D) AndroidManifest.xml

GIAC GASF Exam - Topic 7 Question 3 Discussion

Actual exam question for GIAC's GASF exam
Question #: 3
Topic #: 7
[All GASF Questions]

An Android device user is known to use Facebook to communicate with other parties under examination.

There is no evidence of the Facebook application on the phone. If there was Facebook usage where would an examiner expect to find these artifacts?

Show Suggested Answer Hide Answer
Suggested Answer: B

by Pete at May 03, 2022, 01:08 PM

Limited Time Offer

25%

Off

Get Premium GASF Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Eveline
9 months ago
I think it's more likely in the packages.xml file.
upvoted 0 times
...
Karan
9 months ago
Not so sure about A, could be hidden elsewhere.
upvoted 0 times
...
Laila
10 months ago
Wait, can Facebook even be used without the app?
upvoted 0 times
...
Lizbeth
10 months ago
Definitely A, that's where web app data usually goes.
upvoted 0 times
...
Marguerita
10 months ago
I'd check the Local Storage in Chrome for web usage.
upvoted 0 times
...
Diane
10 months ago
I practiced a similar question about app artifacts, and I think the Local Storage option makes the most sense for web usage.
upvoted 0 times
...
Vincenza
10 months ago
I’m not entirely sure, but I think the packages.xml file might not contain user data, just app info?
upvoted 0 times
...
Kara
10 months ago
I remember studying that web-based artifacts can show up in the Chrome local storage, especially if the app wasn't installed.
upvoted 0 times
...
Allene
10 months ago
I feel like the AndroidManifest.xml wouldn't help us find Facebook usage since it’s more about app permissions and not user data.
upvoted 0 times
...
Bette
10 months ago
I'm pretty confident I can solve this. The key is to plug all the values into the EOQ formula and do the math. I think the answer is going to be one of the multiple choice options provided.
upvoted 0 times
...
Willetta
10 months ago
This seems straightforward. The path needs to use the %LogonServer% variable to handle the different file servers, and the share names provided in the scenario. I'll go with option D.
upvoted 0 times
...
Charolette
10 months ago
This one seems pretty straightforward. Microsoft Defender for Office 365 is a security solution, so the answer has to be C - security.
upvoted 0 times
...
Marleen
10 months ago
I'm not too familiar with the Microsoft Teams Rooms licensing options, but I'll carefully read through the question and requirements to try to determine the best fit. Hopefully, I can eliminate some of the options and narrow it down.
upvoted 0 times
...
Lucia
10 months ago
Option A seems familiar to me, but I can't recall if that was for basic config or for the POAP process specifically. I'm hesitant about my choice.
upvoted 0 times
...

Save Cancel