Cyber Monday 2024! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

GIAC Exam GASF Topic 6 Question 36 Discussion

Actual exam question for GIAC's GASF exam
Question #: 36
Topic #: 6
[All GASF Questions]

When examining a file system acquisition of an Android device Which artifact must be carved out manually?

Show Suggested Answer Hide Answer
Suggested Answer: C

by Elbert at Aug 07, 2024, 01:15 AM

Limited Time Offer

25%

Off

Get Premium GASF Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel
Walton
3 months ago
I think both deleted images and SMS messages should be manually carved out to ensure a thorough examination of the file system acquisition.
upvoted 0 times
...
Xuan
3 months ago
I'm going to have to go with C) SMS messages. After all, who needs contacts or phone numbers when you can read through someone's entire text history? It's like a modern-day version of listening in on their phone conversations.
upvoted 0 times
...
Oretha
4 months ago
But deleted images can be crucial evidence too, that's why it's important to manually extract them.
upvoted 0 times
...
Albina
4 months ago
B) Contacts? Really? What is this, the 90s? We're living in the digital age, people. Let's focus on the important stuff, like tracking down those elusive phone numbers and deleted photos.
upvoted 0 times
Alysa
3 months ago
D) Phone numbers can lead to potential suspects or witnesses, so they are definitely important to carve out manually.
upvoted 0 times
...
Lauran
3 months ago
C) SMS messages can contain important information that may be relevant to the investigation.
upvoted 0 times
...
Eleonora
3 months ago
A) Deleted images are crucial to recover, they can provide valuable evidence.
upvoted 0 times
...
...
Fanny
4 months ago
C) SMS messages is the way to go. I bet there are some spicy conversations just waiting to be uncovered. This is like forensic reality TV, but with more typing and less drama.
upvoted 0 times
Janine
2 months ago
D) Phone numbers can be useful for connecting different pieces of evidence.
upvoted 0 times
...
Glory
3 months ago
C) SMS messages can reveal important conversations and interactions.
upvoted 0 times
...
Mozell
3 months ago
B) Contacts can provide insight into the social network of the device owner.
upvoted 0 times
...
Major
3 months ago
A) Deleted images can also contain valuable information that was attempted to be hidden.
upvoted 0 times
...
...
Sherrell
4 months ago
A) Deleted images, of course! That's where the real dirt is. Nobody wants to see their ex's contact info, but those deleted selfies? Jackpot!
upvoted 0 times
Cherrie
3 months ago
B) Contacts might have some useful information too, but deleted images could reveal more secrets.
upvoted 0 times
...
Michael
3 months ago
A) Deleted images are definitely the way to go. You never know what you might find.
upvoted 0 times
...
...
Darrin
4 months ago
I think D) Phone numbers is the correct answer. Who even cares about contacts or SMS messages when you can just extract the juicy phone numbers, am I right?
upvoted 0 times
Maryann
3 months ago
I agree, but don't forget about C) SMS messages as well.
upvoted 0 times
...
Goldie
3 months ago
I believe A) Deleted images might also be important to carve out.
upvoted 0 times
...
Helga
3 months ago
I think D) Phone numbers is the correct answer.
upvoted 0 times
...
...
Nobuko
4 months ago
I disagree, I believe it's SMS messages that need to be manually carved out.
upvoted 0 times
...
Oretha
4 months ago
I think the artifact that must be carved out manually is deleted images.
upvoted 0 times
...

Save Cancel