GIAC Exam GASF Topic 4 Question 44 Discussion

Actual exam question for GIAC's GASF exam

Question #: 44
Topic #: 4

[All GASF Questions]

How would an examiner review items deleted from a SQLITE database?

AUsing a Hex Viewer

BConverting the database to a txt file

CReviewing the file header

DSelecting the raw data from the table

Show Suggested Answer

Suggested Answer: C

by Nguyet at Oct 21, 2024, 12:00 AM

Limited Time Offer

25%

Off

Contribute your Thoughts:

Submit Cancel

1 days ago

I agree with Dulce. Using a Hex Viewer can help in recovering deleted items from the database.

upvoted 0 times

...

2 days ago

I think an examiner would review items deleted from a SQLITE database by using a Hex Viewer.

upvoted 0 times

...