GASF GIAC Advanced Smartphone Forensics (GASF)

Loading demo links...

Showing 1–3 of 10 questions

Question 1

Examine the unpacked Android application below. Which important file, resident in most

Android applications, is missing?

Select an option, then click Submit answer.

  • dalvik-cache

  • classes.dex

  • com.skype.raider-1.apk

  • classes-dex2jar.jar


Question 2

What is a risk to the security of an iPhone backup if the user selects to set a password and encrypt their

backup?

Select an option, then click Submit answer.

  • The keychain is not captured with the backup and the password can be recovered from the Info.plist file

  • The clear text password will be cached in the user’s keychain and can be recovered searching the user’s keychain

  • The data is encrypted using a strong key but the password is saved to a file which is encoded using
    Base64, which is easily reversible

  • The backup file is encrypted and a copy of the keychain is saved in a local file which may be attacked using brute force tools


Question 3

When analyzing the WhatsApp timestamp “1461184912” in iOS what timestamp conversion should be used?

Select an option, then click Submit answer.

  • Chrome

  • Webkit

  • UNIX Epoch

  • Mac Absolute