GIAC Exam GASF Topic 8 Question 33 Discussion

Actual exam question for GIAC's GASF exam

Question #: 33
Topic #: 8

An analyst is investigating files on a Nokia S60 Symbian device and looking for data that would contain

possible cell tower locations, date and time stamps, phone numbers and/or references to files saved on the device. Which of the follow files would contain user data that was created and stored on the device that meet this criteria?

AMapView.r08

BLifeblogCOUNTRYSTRINGS.r1 3

CLifeblog.db

DPbkView.r03

Show Suggested Answer

Suggested Answer: C

by Yoko at Jul 01, 2024, 04:31 PM

Limited Time Offer

25%

Off

Get Premium GASF Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Sharen

6 months ago

Haha, who names a file 'LifeblogCOUNTRYSTRINGS.r13'? I'm going with C) Lifeblog.db, clearly the winner here.

upvoted 0 times

...

Polly

6 months ago

C) Lifeblog.db, no doubt. I bet the analyst is just trying to trick us with those other file names.

upvoted 0 times

Josphine

5 months ago

C) Lifeblog.db is the most likely file to contain the user data we are searching for.

upvoted 0 times

...

Kami

5 months ago

B) LifeblogCOUNTRYSTRINGS.r13 doesn't seem to contain the data we need.

upvoted 0 times

...

Elfriede

5 months ago

A) MapView.r08 is definitely not the file we are looking for.

upvoted 0 times

...

Iraida

6 months ago

I think PbkView.r03 might also have some relevant user data stored on the device.

upvoted 0 times

...

Chaya

6 months ago

I'm going with C) Lifeblog.db. It just makes the most sense based on the description of the file contents.

upvoted 0 times

Eliz

4 months ago

I'm not sure, but C) Lifeblog.db does sound like the right choice based on the criteria mentioned.

upvoted 0 times

...

Dulce

5 months ago

Yeah, I think so too. It's probably where all the user data is stored.

upvoted 0 times

...

Carey

5 months ago

I agree, C) Lifeblog.db seems like the most likely option to contain that data.

upvoted 0 times

...

Arlette

5 months ago

Let's go with C) Lifeblog.db then. It's the most logical choice.

upvoted 0 times

...

Natalya

5 months ago

Yeah, I think so too. It's likely to have the cell tower locations, date and time stamps, and phone numbers.

upvoted 0 times

...

Margurite

6 months ago

I agree, C) Lifeblog.db seems like the file that would contain the user data we're looking for.

upvoted 0 times

...

Eladia

6 months ago

I'm not sure, but I think MapView.r08 could also potentially have the data we need.

upvoted 0 times

...

Margot

6 months ago

Definitely C) Lifeblog.db. What kind of analyst doesn't know about the Lifeblog database? *rolls eyes*

upvoted 0 times

Werner

6 months ago

Yeah, that file definitely contains the user data we're looking for.

upvoted 0 times

...

Ozell

6 months ago

I think it's C) Lifeblog.db too.

upvoted 0 times

...

Isreal

7 months ago

I agree with Lashaunda, Lifeblog.db seems like the most likely file to contain that information.

upvoted 0 times

...

Buck

7 months ago

Hmm, this is a tricky one. I'm thinking C) Lifeblog.db might be the right answer here. That database file sounds like it could contain the user data the analyst is looking for.

upvoted 0 times

Shakira

7 months ago

I think you're right. Let's go with C) Lifeblog.db as the file that contains the data we're looking for.

upvoted 0 times

...

Mireya

7 months ago

I agree, C) Lifeblog.db seems like the most likely option to contain the user data we need.

upvoted 0 times

...

Lashaunda

7 months ago

I think the file Lifeblog.db would contain the user data we are looking for.

upvoted 0 times

...