Black Friday Sale Special - Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: sntaclus

examout.co

The device pictured below is in Download Mode to attempt a physical acquisition.

What can be ascertained by viewing the Android boot screen below?

A.

The Android is not rooted

B.

No ROM changes have ever occurred on this device

C.

The Original/Factory ROM is booting

D.

The Original ROM was at one time modified

When conducting forensic analysis of an associated media card, one would most often expect to find this

particular file system format?

A.

HFS

B.

NTFS

C.

Yaffs2

D.

FAT

Which file system is mostly found on Samsung devices?

A.

Yet Another Flash File System (YAFFS2)

B.

Out of Bound (OOB)

C.

Robust File system (RFS)

D.

EXT4

Review the sample database.

What is the BLOB column storing for this particular database table?

A.

Mp4 videos

B.

Encrypted text messages

C.

Audio files

D.

Text messages

E.

JPEG images

What is the MAIN difference between a Full Root and a Shell/Soft Root?

A.

Full root is permanent

B.

Full root Leaves traces behind on the device

C.

Soft root Allows system level access without a password

D.

Soft root Utilizes Shell root

Review the message database below.

What can be determined based on the information provided?

A.

There are no deleted messages in this database

B.

The interrupted sequence in the id column could indicate deleted messages

C.

The messages in this table are “outgoing”

D.

The messages contain attachments

E.

The messages in this table are only “incoming”

What is being shown in the image below?

A.

An outgoing call that was not answered

B.

A call that was answered but immediately hung up

C.

A missed Skype message on an android device

D.

A call that was answered and lasted 5 seconds

As part of your analysis of a legacy BlackBerry device, you examine the installed applications list and it

appears that no third-party applications were installed on the device. Which other file may provide you with additional information on applications that were accessed with the handset?

A.

BlackBerry NV Items

B.

Content Store

C.

Event logs

D.

BBThumbs.dat

What is the extension used for BlackBerry 10 backup files?

A.

.APK

B.

.BBB

C.

.ZIP

D.

.IPD

Which of the following is required in addition to the Apple ID of the custodian to access IOS backup files that are stored in ICloud?

A.

iTunes password

B.

Device passcode

C.

Manifest.plist

D.

Keychain-backup.plist