← Back to exam page

GASF – GIAC Advanced Smartphone Forensics (GASF)

Loading demo links...

Showing 1–3 of 10 questions

Question 1

Examine the unpacked Android application below. Which important file, resident in most

Android applications, is missing?

Select an option, then click Submit answer.

  • ○

    dalvik-cache

  • ○

    classes.dex

  • ○

    com.skype.raider-1.apk

  • ○

    classes-dex2jar.jar


Question 2

What is a risk to the security of an iPhone backup if the user selects to set a password and encrypt their

backup?

Select an option, then click Submit answer.

  • ○

    The keychain is not captured with the backup and the password can be recovered from the Info.plist file

  • ○

    The clear text password will be cached in the user’s keychain and can be recovered searching the user’s keychain

  • ○

    The data is encrypted using a strong key but the password is saved to a file which is encoded using
    Base64, which is easily reversible

  • ○

    The backup file is encrypted and a copy of the keychain is saved in a local file which may be attacked using brute force tools


Question 3

When analyzing the WhatsApp timestamp “1461184912” in iOS what timestamp conversion should be used?

Select an option, then click Submit answer.

  • ○

    Chrome

  • ○

    Webkit

  • ○

    UNIX Epoch

  • ○

    Mac Absolute