Cyber Monday 2024! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

GIAC Exam GASF Topic 6 Question 26 Discussion

Actual exam question for GIAC's GASF exam
Question #: 26
Topic #: 6
[All GASF Questions]

When examining a file system acquisition of an Android device Which artifact must be carved out manually?

Show Suggested Answer Hide Answer
Suggested Answer: C

by My at Apr 10, 2024, 09:32 PM

Limited Time Offer

25%

Off

Get Premium GASF Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel
Micheline
6 months ago
Phone numbers are important too, they could be linked to other suspects.
upvoted 0 times
...
Judy
6 months ago
I disagree, contacts could also contain valuable information.
upvoted 0 times
...
Loreta
6 months ago
I believe SMS messages should also be carved out manually.
upvoted 0 times
...
Latrice
6 months ago
I agree with Ronny, deleted images can be crucial evidence.
upvoted 0 times
...
Ronny
6 months ago
I think deleted images must be carved out manually.
upvoted 0 times
...
Armanda
7 months ago
That's a good point, Contacts could also be important for forensic examination.
upvoted 0 times
...
King
7 months ago
I think Contacts might also need to be carved out manually, as they contain important information.
upvoted 0 times
...
Valentin
7 months ago
I agree with SMS messages seems like the most crucial artifact to manually carve out.
upvoted 0 times
...
Armanda
7 months ago
I think the artifact that must be carved out manually is SMS messages.
upvoted 0 times
...
Dorian
8 months ago
Ugh, I hate these questions where they try to catch you out. Why can't they just ask about something normal, like recovering WhatsApp messages or something?
upvoted 0 times
...
Kelvin
8 months ago
I bet it's deleted images. That's the kind of thing that would require manual carving, right? The other options seem too straightforward.
upvoted 0 times
...
Evette
8 months ago
Wait, are we sure we're even looking at the right file system? This could be a trick question about some obscure Android artifact that nobody knows about.
upvoted 0 times
...
Elvis
8 months ago
Phone numbers? Really? That seems way too simple. There's gotta be more to it than that.
upvoted 0 times
...
Rosina
8 months ago
Hmm, I'm leaning towards SMS messages. Those seem like they'd be a bit trickier to get at than the other options.
upvoted 0 times
Candra
6 months ago
I believe SMS messages could contain crucial evidence.
upvoted 0 times
...
Georgeanna
7 months ago
Contacts might have some valuable information as well.
upvoted 0 times
...
Carla
7 months ago
I think deleted images could be important too.
upvoted 0 times
...
...
Pamela
8 months ago
This is a tricky question! I'm not sure if I should go with the obvious answer of deleted images, or if there's some hidden gotcha here.
upvoted 0 times
...

Save Cancel