Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

GIAC GASF Exam - Topic 7 Question 3 Discussion

Posted by Pete on May 03, 2022 at 01:08 PM

An Android device user is known to use Facebook to communicate with other parties under examination.

There is no evidence of the Facebook application on the phone. If there was Facebook usage where would an examiner expect to find these artifacts?

Suggested Answer: B

Get Premium GASF Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test
14 comments · newest first
EV
Eveline 11 months ago
I think it's more likely in the packages.xml file.
KA
Karan 11 months ago
Not so sure about A, could be hidden elsewhere.
LA
Laila 12 months ago
Wait, can Facebook even be used without the app?
LI
Lizbeth 12 months ago
Definitely A, that's where web app data usually goes.
MA
Marguerita 12 months ago
I'd check the Local Storage in Chrome for web usage.
DI
Diane 1 year ago
I practiced a similar question about app artifacts, and I think the Local Storage option makes the most sense for web usage.
VI
Vincenza 1 year ago
I’m not entirely sure, but I think the packages.xml file might not contain user data, just app info?
KA
Kara 1 year ago
I remember studying that web-based artifacts can show up in the Chrome local storage, especially if the app wasn't installed.
AL
Allene 1 year ago
I feel like the AndroidManifest.xml wouldn't help us find Facebook usage since it’s more about app permissions and not user data.
BE
Bette 1 year ago
I'm pretty confident I can solve this. The key is to plug all the values into the EOQ formula and do the math. I think the answer is going to be one of the multiple choice options provided.
WI
Willetta 1 year ago
This seems straightforward. The path needs to use the %LogonServer% variable to handle the different file servers, and the share names provided in the scenario. I'll go with option D.
CH
Charolette 1 year ago
This one seems pretty straightforward. Microsoft Defender for Office 365 is a security solution, so the answer has to be C - security.
MA
Marleen 1 year ago
I'm not too familiar with the Microsoft Teams Rooms licensing options, but I'll carefully read through the question and requirements to try to determine the best fit. Hopefully, I can eliminate some of the options and narrow it down.
LU
Lucia 1 year ago
Option A seems familiar to me, but I can't recall if that was for basic config or for the POAP process specifically. I'm hesitant about my choice.
0/2000 characters

Save Cancel