GIAC Exam GASF Topic 5 Question 28 Discussion

Actual exam question for GIAC's GASF exam

Question #: 28
Topic #: 5

An analyst is investigating files on a Nokia S60 Symbian device and looking for data that would contain

possible cell tower locations, date and time stamps, phone numbers and/or references to files saved on the device. Which of the follow files would contain user data that was created and stored on the device that meet this criteria?

AMapView.r08

BLifeblogCOUNTRYSTRINGS.r1 3

CLifeblog.db

DPbkView.r03

Show Suggested Answer

Suggested Answer: C

by Lizbeth at May 02, 2024, 07:23 AM

Limited Time Offer

25%

Off

Get Premium GASF Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Judy

6 months ago

Could be, but database files usually contain more comprehensive info. I'm sticking with Lifeblog.db.

upvoted 0 times

...

Keneth

6 months ago

But MapView.r08 sounds like it could have location data.

upvoted 0 times

...

Kami

6 months ago

Yeah, Lifeblog.db makes sense. It should store detailed data like timestamps and phone numbers.

upvoted 0 times

...

Ming

7 months ago

I believe Lifeblog.db might have the info. It's a database file, right?

upvoted 0 times

...

Keneth

7 months ago

Seems pretty technical. Not sure about all the file types.

upvoted 0 times

...

Judy

7 months ago

What do you think of this Symbian exam question?

upvoted 0 times

...