{"id":10334,"date":"2020-07-29T07:19:17","date_gmt":"2020-07-29T07:19:17","guid":{"rendered":"https:\/\/www.dumpsbase.com\/freedumps\/?p=10334"},"modified":"2020-07-29T07:19:20","modified_gmt":"2020-07-29T07:19:20","slug":"giac-advanced-smartphone-forensics-gasf-dumps-questions-online","status":"publish","type":"post","link":"https:\/\/www.dumpsbase.com\/freedumps\/giac-advanced-smartphone-forensics-gasf-dumps-questions-online.html","title":{"rendered":"GIAC Advanced Smartphone Forensics GASF Dumps Questions Online"},"content":{"rendered":"<p>Passing GASF proctored exam is the requirement to get GIAC Advanced Smartphone Forensics certification exam. Being GASF Certified assures that you demonstrate an understanding of the fundamentals of mobile forensics, device file system analysis, mobile application behavior, event artifact analysis and the identification and analysis of mobile device malware. We have released new GASF dumps questions online to help you pass GIAC Advanced Smartphone Forensics exam in the first attempt. New GASF dumps questions contain 71 exam questions and answers, you will be highly recommended to read GASF free dumps first.<\/p>\n<h2>Read <span style=\"color: #800000;\">GASF Free Dumps<\/span> First For GIAC Advanced Smartphone Forensics Exam<\/h2>\n<script>\n\t  window.fbAsyncInit = function() {\n\t    FB.init({\n\t      appId            : '622169541470367',\n\t      autoLogAppEvents : true,\n\t      xfbml            : true,\n\t      version          : 'v3.1'\n\t    });\n\t  };\n\t\n\t  (function(d, s, id){\n\t     var js, fjs = d.getElementsByTagName(s)[0];\n\t     if (d.getElementById(id)) {return;}\n\t     js = d.createElement(s); js.id = id;\n\t     js.src = \"https:\/\/connect.facebook.net\/en_US\/sdk.js\";\n\t     fjs.parentNode.insertBefore(js, fjs);\n\t   }(document, 'script', 'facebook-jssdk'));\n\t<\/script><script type=\"text\/javascript\" >\ndocument.addEventListener(\"DOMContentLoaded\", function(event) { \nif(!window.jQuery) alert(\"The important jQuery library is not properly loaded in your site. Your WordPress theme is probably missing the essential wp_head() call. You can switch to another theme and you will see that the plugin works fine and this notice disappears. If you are still not sure what to do you can contact us for help.\");\n});\n<\/script>  \n  \n<div  id=\"watupro_quiz\" class=\"quiz-area single-page-quiz\">\n<p id=\"submittingExam4484\" style=\"display:none;text-align:center;\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/www.dumpsbase.com\/freedumps\/wp-content\/plugins\/watupro\/img\/loading.gif\" width=\"16\" height=\"16\"><\/p>\n\n<div class=\"watupro-exam-description\" id=\"description-quiz-4484\"><\/div>\n\n<form action=\"\" method=\"post\" class=\"quiz-form\" id=\"quiz-4484\"  enctype=\"multipart\/form-data\" >\n<div class='watu-question ' id='question-1' style=';'><div id='questionWrap-1'  class='   watupro-question-id-140896'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>1. <\/span>Based on the image below, which file system is being examined? <br \/>\r<br><br><img decoding=\"async\" width=330 height=709 src=\"https:\/\/www.dumpsbase.com\/freedumps\/wp-content\/uploads\/2020\/07\/image002-20.jpg\" v:shapes=\"_x0000_i1025\"><br><\/div><input type='hidden' name='question_id[]' id='qID_1' value='140896' \/><input type='hidden' id='answerType140896' value='checkbox'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-140896[]' id='answer-id-575482' class='answer   answerof-140896 ' value='575482'   \/><label for='answer-id-575482' id='answer-label-575482' class=' answer'><span>Chinese knock-off<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-140896[]' id='answer-id-575483' class='answer   answerof-140896 ' value='575483'   \/><label for='answer-id-575483' id='answer-label-575483' class=' answer'><span>Windows<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-140896[]' id='answer-id-575484' class='answer   answerof-140896 ' value='575484'   \/><label for='answer-id-575484' id='answer-label-575484' class=' answer'><span>Android<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-140896[]' id='answer-id-575485' class='answer   answerof-140896 ' value='575485'   \/><label for='answer-id-575485' id='answer-label-575485' class=' answer'><span>Blackberry<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-2' style=';'><div id='questionWrap-2'  class='   watupro-question-id-140897'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>2. <\/span>What type of acquisition is being examined in the image below? <br \/>\r<br><br><img decoding=\"async\" width=650 height=271 src=\"https:\/\/www.dumpsbase.com\/freedumps\/wp-content\/uploads\/2020\/07\/image004-20.jpg\" v:shapes=\"_x0000_i1026\"><br><\/div><input type='hidden' name='question_id[]' id='qID_2' value='140897' \/><input type='hidden' id='answerType140897' value='checkbox'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-140897[]' id='answer-id-575486' class='answer   answerof-140897 ' value='575486'   \/><label for='answer-id-575486' id='answer-label-575486' class=' answer'><span>iOS bypass lock<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-140897[]' id='answer-id-575487' class='answer   answerof-140897 ' value='575487'   \/><label for='answer-id-575487' id='answer-label-575487' class=' answer'><span>Blackberry logical<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-140897[]' id='answer-id-575488' class='answer   answerof-140897 ' value='575488'   \/><label for='answer-id-575488' id='answer-label-575488' class=' answer'><span>Android physical<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-140897[]' id='answer-id-575489' class='answer   answerof-140897 ' value='575489'   \/><label for='answer-id-575489' id='answer-label-575489' class=' answer'><span>Windows Mobile file system<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-3' style=';'><div id='questionWrap-3'  class='   watupro-question-id-140898'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>3. <\/span>Which of the following files contains details regarding the encryption state of an iTunes backup file?<\/div><input type='hidden' name='question_id[]' id='qID_3' value='140898' \/><input type='hidden' id='answerType140898' value='checkbox'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-140898[]' id='answer-id-575490' class='answer   answerof-140898 ' value='575490'   \/><label for='answer-id-575490' id='answer-label-575490' class=' answer'><span>Keychain-backup.plist<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-140898[]' id='answer-id-575491' class='answer   answerof-140898 ' value='575491'   \/><label for='answer-id-575491' id='answer-label-575491' class=' answer'><span>Manifest.mbdb<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-140898[]' id='answer-id-575492' class='answer   answerof-140898 ' value='575492'   \/><label for='answer-id-575492' id='answer-label-575492' class=' answer'><span>Manifest.plist<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-140898[]' id='answer-id-575493' class='answer   answerof-140898 ' value='575493'   \/><label for='answer-id-575493' id='answer-label-575493' class=' answer'><span>Status.plist<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-4' style=';'><div id='questionWrap-4'  class='   watupro-question-id-140899'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>4. <\/span>In addition to the device passcode, what other essential piece of information is most often required in order to decrypt the contents of BlackBerry OS 10 handsets?<\/div><input type='hidden' name='question_id[]' id='qID_4' value='140899' \/><input type='hidden' id='answerType140899' value='checkbox'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-140899[]' id='answer-id-575494' class='answer   answerof-140899 ' value='575494'   \/><label for='answer-id-575494' id='answer-label-575494' class=' answer'><span>BlackBerry Blend username\/pin<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-140899[]' id='answer-id-575495' class='answer   answerof-140899 ' value='575495'   \/><label for='answer-id-575495' id='answer-label-575495' class=' answer'><span>BlackBerry Balance username\/password<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-140899[]' id='answer-id-575496' class='answer   answerof-140899 ' value='575496'   \/><label for='answer-id-575496' id='answer-label-575496' class=' answer'><span>BlackBerry Link ID\/password<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-140899[]' id='answer-id-575497' class='answer   answerof-140899 ' value='575497'   \/><label for='answer-id-575497' id='answer-label-575497' class=' answer'><span>BBM pin<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-5' style=';'><div id='questionWrap-5'  class='   watupro-question-id-140900'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>5. <\/span>The device pictured below is in Download Mode to attempt a physical acquisition. <br \/>\r<br><br><img decoding=\"async\" width=260 height=328 src=\"https:\/\/www.dumpsbase.com\/freedumps\/wp-content\/uploads\/2020\/07\/image006-21.jpg\" v:shapes=\"_x0000_i1027\"><br><br \/>\r<br>What can be ascertained by viewing the Android boot screen below?<\/div><input type='hidden' name='question_id[]' id='qID_5' value='140900' \/><input type='hidden' id='answerType140900' value='checkbox'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-140900[]' id='answer-id-575498' class='answer   answerof-140900 ' value='575498'   \/><label for='answer-id-575498' id='answer-label-575498' class=' answer'><span>The Android is not rooted<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-140900[]' id='answer-id-575499' class='answer   answerof-140900 ' value='575499'   \/><label for='answer-id-575499' id='answer-label-575499' class=' answer'><span>No ROM changes have ever occurred on this device<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-140900[]' id='answer-id-575500' class='answer   answerof-140900 ' value='575500'   \/><label for='answer-id-575500' id='answer-label-575500' class=' answer'><span>The Original\/Factory ROM is booting<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-140900[]' id='answer-id-575501' class='answer   answerof-140900 ' value='575501'   \/><label for='answer-id-575501' id='answer-label-575501' class=' answer'><span>The Original ROM was at one time modified<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-6' style=';'><div id='questionWrap-6'  class='   watupro-question-id-140901'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>6. <\/span>An analyst investigating a Nokia S60 Symbian device wants to know if an Adobe Flash file on the handset is compromised. <br \/>\r<br><br><img decoding=\"async\" width=639 height=285 src=\"https:\/\/www.dumpsbase.com\/freedumps\/wp-content\/uploads\/2020\/07\/image008-19.jpg\" v:shapes=\"_x0000_i1028\"><br><br \/>\r<br>Which file in the image will best target the Adobe Flash files?<\/div><input type='hidden' name='question_id[]' id='qID_6' value='140901' \/><input type='hidden' id='answerType140901' value='checkbox'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-140901[]' id='answer-id-575502' class='answer   answerof-140901 ' value='575502'   \/><label for='answer-id-575502' id='answer-label-575502' class=' answer'><span>FLASHLIT<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-140901[]' id='answer-id-575503' class='answer   answerof-140901 ' value='575503'   \/><label for='answer-id-575503' id='answer-label-575503' class=' answer'><span>sis<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-140901[]' id='answer-id-575504' class='answer   answerof-140901 ' value='575504'   \/><label for='answer-id-575504' id='answer-label-575504' class=' answer'><span>flashliteplugin.r03<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-140901[]' id='answer-id-575505' class='answer   answerof-140901 ' value='575505'   \/><label for='answer-id-575505' id='answer-label-575505' class=' answer'><span>saflash.r01<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-140901[]' id='answer-id-575506' class='answer   answerof-140901 ' value='575506'   \/><label for='answer-id-575506' id='answer-label-575506' class=' answer'><span>OnlinePrint.sis<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-7' style=';'><div id='questionWrap-7'  class='   watupro-question-id-140902'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>7. <\/span>As part of your analysis of a legacy BlackBerry device, you examine the installed applications list and it appears that no third-party applications were installed on the device. <br \/>\r<br>Which other file may provide you with additional information on applications that were accessed with the handset?<\/div><input type='hidden' name='question_id[]' id='qID_7' value='140902' \/><input type='hidden' id='answerType140902' value='checkbox'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-140902[]' id='answer-id-575507' class='answer   answerof-140902 ' value='575507'   \/><label for='answer-id-575507' id='answer-label-575507' class=' answer'><span>BlackBerry NV Items<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-140902[]' id='answer-id-575508' class='answer   answerof-140902 ' value='575508'   \/><label for='answer-id-575508' id='answer-label-575508' class=' answer'><span>Content Store<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-140902[]' id='answer-id-575509' class='answer   answerof-140902 ' value='575509'   \/><label for='answer-id-575509' id='answer-label-575509' class=' answer'><span>Event logs<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-140902[]' id='answer-id-575510' class='answer   answerof-140902 ' value='575510'   \/><label for='answer-id-575510' id='answer-label-575510' class=' answer'><span>BBThumbs.dat<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-8' style=';'><div id='questionWrap-8'  class='   watupro-question-id-140903'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>8. <\/span>Which artifact must be carved out manually when examining a file system acquisition of an Android device?<\/div><input type='hidden' name='question_id[]' id='qID_8' value='140903' \/><input type='hidden' id='answerType140903' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-140903[]' id='answer-id-575511' class='answer   answerof-140903 ' value='575511'   \/><label for='answer-id-575511' id='answer-label-575511' class=' answer'><span>Deleted images<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-140903[]' id='answer-id-575512' class='answer   answerof-140903 ' value='575512'   \/><label for='answer-id-575512' id='answer-label-575512' class=' answer'><span>Contacts<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-140903[]' id='answer-id-575513' class='answer   answerof-140903 ' value='575513'   \/><label for='answer-id-575513' id='answer-label-575513' class=' answer'><span>SMS messages<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-140903[]' id='answer-id-575514' class='answer   answerof-140903 ' value='575514'   \/><label for='answer-id-575514' id='answer-label-575514' class=' answer'><span>Phone numbers<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-9' style=';'><div id='questionWrap-9'  class='   watupro-question-id-140904'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>9. <\/span>When conducting forensic analysis of an associated media card, one would most often expect to find this particular file system format?<\/div><input type='hidden' name='question_id[]' id='qID_9' value='140904' \/><input type='hidden' id='answerType140904' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-140904[]' id='answer-id-575515' class='answer   answerof-140904 ' value='575515'   \/><label for='answer-id-575515' id='answer-label-575515' class=' answer'><span>HFS<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-140904[]' id='answer-id-575516' class='answer   answerof-140904 ' value='575516'   \/><label for='answer-id-575516' id='answer-label-575516' class=' answer'><span>NTFS<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-140904[]' id='answer-id-575517' class='answer   answerof-140904 ' value='575517'   \/><label for='answer-id-575517' id='answer-label-575517' class=' answer'><span>Yaffs2<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-140904[]' id='answer-id-575518' class='answer   answerof-140904 ' value='575518'   \/><label for='answer-id-575518' id='answer-label-575518' class=' answer'><span>FAT<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-10' style=';'><div id='questionWrap-10'  class='   watupro-question-id-140905'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>10. <\/span>Cellebrite Physical Analyzer uses Bit Defender to scan for malware by flagging files who have known bad hash values. <br \/>\r<br>This is an example of which type of mobile malware detection?<\/div><input type='hidden' name='question_id[]' id='qID_10' value='140905' \/><input type='hidden' id='answerType140905' value='checkbox'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-140905[]' id='answer-id-575519' class='answer   answerof-140905 ' value='575519'   \/><label for='answer-id-575519' id='answer-label-575519' class=' answer'><span>Specific-based malware detection<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-140905[]' id='answer-id-575520' class='answer   answerof-140905 ' value='575520'   \/><label for='answer-id-575520' id='answer-label-575520' class=' answer'><span>Signature-based detection<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-140905[]' id='answer-id-575521' class='answer   answerof-140905 ' value='575521'   \/><label for='answer-id-575521' id='answer-label-575521' class=' answer'><span>Behavioral-based detection<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-140905[]' id='answer-id-575522' class='answer   answerof-140905 ' value='575522'   \/><label for='answer-id-575522' id='answer-label-575522' class=' answer'><span>Cloud based malware detection<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-11' style=';'><div id='questionWrap-11'  class='   watupro-question-id-140906'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>11. <\/span>Which of the following is required in addition to the Apple ID of the custodian to access IOS backup files that are stored in ICloud?<\/div><input type='hidden' name='question_id[]' id='qID_11' value='140906' \/><input type='hidden' id='answerType140906' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-140906[]' id='answer-id-575523' class='answer   answerof-140906 ' value='575523'   \/><label for='answer-id-575523' id='answer-label-575523' class=' answer'><span>iTunes password<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-140906[]' id='answer-id-575524' class='answer   answerof-140906 ' value='575524'   \/><label for='answer-id-575524' id='answer-label-575524' class=' answer'><span>Device passcode<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-140906[]' id='answer-id-575525' class='answer   answerof-140906 ' value='575525'   \/><label for='answer-id-575525' id='answer-label-575525' class=' answer'><span>Manifest.plist<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-140906[]' id='answer-id-575526' class='answer   answerof-140906 ' value='575526'   \/><label for='answer-id-575526' id='answer-label-575526' class=' answer'><span>Keychain-backup.plist<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-12' style=';'><div id='questionWrap-12'  class='   watupro-question-id-140907'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>12. <\/span>In 2015, Apple\u2019s iTunes store was found to be hosting several malicious applications that were infected as a result of hacked version of the developer toolkit used to create applications. <br \/>\r<br>Which Apple developer suite was targeted?<\/div><input type='hidden' name='question_id[]' id='qID_12' value='140907' \/><input type='hidden' id='answerType140907' value='checkbox'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-140907[]' id='answer-id-575527' class='answer   answerof-140907 ' value='575527'   \/><label for='answer-id-575527' id='answer-label-575527' class=' answer'><span>Xcode<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-140907[]' id='answer-id-575528' class='answer   answerof-140907 ' value='575528'   \/><label for='answer-id-575528' id='answer-label-575528' class=' answer'><span>ADB<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-140907[]' id='answer-id-575529' class='answer   answerof-140907 ' value='575529'   \/><label for='answer-id-575529' id='answer-label-575529' class=' answer'><span>Momentics IDE<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-140907[]' id='answer-id-575530' class='answer   answerof-140907 ' value='575530'   \/><label for='answer-id-575530' id='answer-label-575530' class=' answer'><span>Xamarin<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-13' style=';'><div id='questionWrap-13'  class='   watupro-question-id-140908'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>13. <\/span>An Android device user is known to use Facebook to communicate with other parties under examination. There is no evidence of the Facebook application on the phone. <br \/>\r<br>If there was Facebook usage where would an examiner expect to find these artifacts?<\/div><input type='hidden' name='question_id[]' id='qID_13' value='140908' \/><input type='hidden' id='answerType140908' value='checkbox'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-140908[]' id='answer-id-575531' class='answer   answerof-140908 ' value='575531'   \/><label for='answer-id-575531' id='answer-label-575531' class=' answer'><span>com.android.chrome\/app_chrome\/Default\/Local Storage<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-140908[]' id='answer-id-575532' class='answer   answerof-140908 ' value='575532'   \/><label for='answer-id-575532' id='answer-label-575532' class=' answer'><span>dmappmgr.db<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-140908[]' id='answer-id-575533' class='answer   answerof-140908 ' value='575533'   \/><label for='answer-id-575533' id='answer-label-575533' class=' answer'><span>\/data\/system\/packages.xml<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-140908[]' id='answer-id-575534' class='answer   answerof-140908 ' value='575534'   \/><label for='answer-id-575534' id='answer-label-575534' class=' answer'><span>AndroidManifest.xml<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-14' style=';'><div id='questionWrap-14'  class='   watupro-question-id-140909'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>14. <\/span>Physical Analyzer provides a function to narrow down a search based on a timestamp, a type, a party or date. <br \/>\r<br>What is the name of this advanced searching capability?<\/div><input type='hidden' name='question_id[]' id='qID_14' value='140909' \/><input type='hidden' id='answerType140909' value='checkbox'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-140909[]' id='answer-id-575535' class='answer   answerof-140909 ' value='575535'   \/><label for='answer-id-575535' id='answer-label-575535' class=' answer'><span>Watchlist Editor<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-140909[]' id='answer-id-575536' class='answer   answerof-140909 ' value='575536'   \/><label for='answer-id-575536' id='answer-label-575536' class=' answer'><span>Tags<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-140909[]' id='answer-id-575537' class='answer   answerof-140909 ' value='575537'   \/><label for='answer-id-575537' id='answer-label-575537' class=' answer'><span>Timeline<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-140909[]' id='answer-id-575538' class='answer   answerof-140909 ' value='575538'   \/><label for='answer-id-575538' id='answer-label-575538' class=' answer'><span>Event of Interest<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-15' style=';'><div id='questionWrap-15'  class='   watupro-question-id-140910'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>15. <\/span>The files pictured below from a BlackBerry OS10 file system have a unique file extension. <br \/>\r<br><br><img decoding=\"async\" width=613 height=433 src=\"https:\/\/www.dumpsbase.com\/freedumps\/wp-content\/uploads\/2020\/07\/image010-16.jpg\" v:shapes=\"_x0000_i1029\"><br><br \/>\r<br>What can be concluded about these files?<\/div><input type='hidden' name='question_id[]' id='qID_15' value='140910' \/><input type='hidden' id='answerType140910' value='checkbox'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-140910[]' id='answer-id-575539' class='answer   answerof-140910 ' value='575539'   \/><label for='answer-id-575539' id='answer-label-575539' class=' answer'><span>Files are protected by the file system, so changing the file system makes them less accessible<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-140910[]' id='answer-id-575540' class='answer   answerof-140910 ' value='575540'   \/><label for='answer-id-575540' id='answer-label-575540' class=' answer'><span>Files are encrypted to prevent them from being viewed without the decryption key<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-140910[]' id='answer-id-575541' class='answer   answerof-140910 ' value='575541'   \/><label for='answer-id-575541' id='answer-label-575541' class=' answer'><span>Files are encoded for secure transmitting of data<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-140910[]' id='answer-id-575542' class='answer   answerof-140910 ' value='575542'   \/><label for='answer-id-575542' id='answer-label-575542' class=' answer'><span>Files are located on a media card so they contain a unique file extension<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-16' style=';'><div id='questionWrap-16'  class='   watupro-question-id-140911'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>16. <\/span>Where can an analyst find data to provide additional artifacts to support the evidence in the highlighted file? <br \/>\r<br><br><img decoding=\"async\" width=650 height=250 src=\"https:\/\/www.dumpsbase.com\/freedumps\/wp-content\/uploads\/2020\/07\/image012-16.jpg\" v:shapes=\"_x0000_i1030\"><br><\/div><input type='hidden' name='question_id[]' id='qID_16' value='140911' \/><input type='hidden' id='answerType140911' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-140911[]' id='answer-id-575543' class='answer   answerof-140911 ' value='575543'   \/><label for='answer-id-575543' id='answer-label-575543' class=' answer'><span>internal.db-wal<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-140911[]' id='answer-id-575544' class='answer   answerof-140911 ' value='575544'   \/><label for='answer-id-575544' id='answer-label-575544' class=' answer'><span>browser2.db<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-140911[]' id='answer-id-575545' class='answer   answerof-140911 ' value='575545'   \/><label for='answer-id-575545' id='answer-label-575545' class=' answer'><span>sysmon2.db-shm<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-140911[]' id='answer-id-575546' class='answer   answerof-140911 ' value='575546'   \/><label for='answer-id-575546' id='answer-label-575546' class=' answer'><span>external.db<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-17' style=';'><div id='questionWrap-17'  class='   watupro-question-id-140912'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>17. <\/span>Which of the following is a unique 56 bit number assigned to a CDMA handset?<\/div><input type='hidden' name='question_id[]' id='qID_17' value='140912' \/><input type='hidden' id='answerType140912' value='checkbox'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-140912[]' id='answer-id-575547' class='answer   answerof-140912 ' value='575547'   \/><label for='answer-id-575547' id='answer-label-575547' class=' answer'><span>Mobile Station International Subscriber Directory Number (MSISDN)<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-140912[]' id='answer-id-575548' class='answer   answerof-140912 ' value='575548'   \/><label for='answer-id-575548' id='answer-label-575548' class=' answer'><span>Electronic Serial Number (ESN)<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-140912[]' id='answer-id-575549' class='answer   answerof-140912 ' value='575549'   \/><label for='answer-id-575549' id='answer-label-575549' class=' answer'><span>International Mobile Equipment Identifier (IMEI)<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-140912[]' id='answer-id-575550' class='answer   answerof-140912 ' value='575550'   \/><label for='answer-id-575550' id='answer-label-575550' class=' answer'><span>Mobile Equipment ID (MEID)<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-18' style=';'><div id='questionWrap-18'  class='   watupro-question-id-140913'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>18. <\/span>Which of the following files provides the most accurate reflection of the device\u2019s date\/timestamp related to the last device wipe?<\/div><input type='hidden' name='question_id[]' id='qID_18' value='140913' \/><input type='hidden' id='answerType140913' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-140913[]' id='answer-id-575551' class='answer   answerof-140913 ' value='575551'   \/><label for='answer-id-575551' id='answer-label-575551' class=' answer'><span>\/private\/var\/mobile\/Library\/AddressBook\/AddressBook.sqlitedb<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-140913[]' id='answer-id-575552' class='answer   answerof-140913 ' value='575552'   \/><label for='answer-id-575552' id='answer-label-575552' class=' answer'><span>\/private\/var\/mobile\/Applications\/com.apple.mobilesafari\/Library\/history.db<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-140913[]' id='answer-id-575553' class='answer   answerof-140913 ' value='575553'   \/><label for='answer-id-575553' id='answer-label-575553' class=' answer'><span>\/private\/var\/mobile\/Applications\/com.viber\/Library\/Prefernces\/com.viber.plist<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-140913[]' id='answer-id-575554' class='answer   answerof-140913 ' value='575554'   \/><label for='answer-id-575554' id='answer-label-575554' class=' answer'><span>\/private\/var\/mobile\/Applications\/net.whatsapp.WhatsApp\/Library\/pw.dat<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-19' style=';'><div id='questionWrap-19'  class='   watupro-question-id-140914'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>19. <\/span>Which of the following is the term for the SMS malware that sends text messages to a premium number generating large service bills for the user of the targeted device?<\/div><input type='hidden' name='question_id[]' id='qID_19' value='140914' \/><input type='hidden' id='answerType140914' value='checkbox'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-140914[]' id='answer-id-575555' class='answer   answerof-140914 ' value='575555'   \/><label for='answer-id-575555' id='answer-label-575555' class=' answer'><span>Trojan<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-140914[]' id='answer-id-575556' class='answer   answerof-140914 ' value='575556'   \/><label for='answer-id-575556' id='answer-label-575556' class=' answer'><span>Adware<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-140914[]' id='answer-id-575557' class='answer   answerof-140914 ' value='575557'   \/><label for='answer-id-575557' id='answer-label-575557' class=' answer'><span>Potentially unwanted applications<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-140914[]' id='answer-id-575558' class='answer   answerof-140914 ' value='575558'   \/><label for='answer-id-575558' id='answer-label-575558' class=' answer'><span>Click bait<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-20' style=';'><div id='questionWrap-20'  class='   watupro-question-id-140915'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>20. <\/span>When examining the iOS device shown below the tool indicates that there are 4 chat messages recovered <br \/>\r<br><br><img decoding=\"async\" width=650 height=530 src=\"https:\/\/www.dumpsbase.com\/freedumps\/wp-content\/uploads\/2020\/07\/image014-15.jpg\" v:shapes=\"_x0000_i1031\"><br><\/div><input type='hidden' name='question_id[]' id='qID_20' value='140915' \/><input type='hidden' id='answerType140915' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-140915[]' id='answer-id-575559' class='answer   answerof-140915 ' value='575559'   \/><label for='answer-id-575559' id='answer-label-575559' class=' answer'><span>Memory ranges from a physical dump of the device<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-140915[]' id='answer-id-575560' class='answer   answerof-140915 ' value='575560'   \/><label for='answer-id-575560' id='answer-label-575560' class=' answer'><span>Databases installed and maintained by the application<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-140915[]' id='answer-id-575561' class='answer   answerof-140915 ' value='575561'   \/><label for='answer-id-575561' id='answer-label-575561' class=' answer'><span>Internet history plist files found in logical acquisitions<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-140915[]' id='answer-id-575562' class='answer   answerof-140915 ' value='575562'   \/><label for='answer-id-575562' id='answer-label-575562' class=' answer'><span>IP connections used by the application<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div style='display:none' id='question-21'>\n\t<div class='question-content'>\n\t\t<img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/www.dumpsbase.com\/freedumps\/wp-content\/plugins\/watupro\/img\/loading.gif\" width=\"16\" height=\"16\" alt=\"Loading...\" title=\"Loading...\" \/>&nbsp;Loading...\t<\/div>\n<\/div>\n\n<br \/>\n\t\n\t\t\t<div class=\"watupro_buttons flex \" id=\"watuPROButtons4484\" >\n\t\t  <div id=\"prev-question\" style=\"display:none;\"><input type=\"button\" value=\"&lt; Previous\" onclick=\"WatuPRO.nextQuestion(event, 'previous');\"\/><\/div>\t\t  \t\t  \t\t   \n\t\t   \t  \t\t<div><input type=\"button\" name=\"action\" class=\"watupro-submit-button\" onclick=\"WatuPRO.submitResult(event)\" id=\"action-button\" value=\"View Results\"  \/>\n\t\t<\/div>\n\t\t<\/div>\n\t\t\n\t<input type=\"hidden\" name=\"quiz_id\" value=\"4484\" id=\"watuPROExamID\"\/>\n\t<input type=\"hidden\" name=\"start_time\" id=\"startTime\" value=\"2026-05-01 09:28:26\" \/>\n\t<input type=\"hidden\" name=\"start_timestamp\" id=\"startTimeStamp\" value=\"1777627706\" \/>\n\t<input type=\"hidden\" name=\"question_ids\" value=\"\" \/>\n\t<input type=\"hidden\" name=\"watupro_questions\" value=\"140896:575482,575483,575484,575485 | 140897:575486,575487,575488,575489 | 140898:575490,575491,575492,575493 | 140899:575494,575495,575496,575497 | 140900:575498,575499,575500,575501 | 140901:575502,575503,575504,575505,575506 | 140902:575507,575508,575509,575510 | 140903:575511,575512,575513,575514 | 140904:575515,575516,575517,575518 | 140905:575519,575520,575521,575522 | 140906:575523,575524,575525,575526 | 140907:575527,575528,575529,575530 | 140908:575531,575532,575533,575534 | 140909:575535,575536,575537,575538 | 140910:575539,575540,575541,575542 | 140911:575543,575544,575545,575546 | 140912:575547,575548,575549,575550 | 140913:575551,575552,575553,575554 | 140914:575555,575556,575557,575558 | 140915:575559,575560,575561,575562\" \/>\n\t<input type=\"hidden\" name=\"no_ajax\" value=\"0\">\t\t\t<\/form>\n\t<p>&nbsp;<\/p>\n<\/div>\n\n<script type=\"text\/javascript\">\n\/\/jQuery(document).ready(function(){\ndocument.addEventListener(\"DOMContentLoaded\", function(event) { \t\nvar question_ids = \"140896,140897,140898,140899,140900,140901,140902,140903,140904,140905,140906,140907,140908,140909,140910,140911,140912,140913,140914,140915\";\nWatuPROSettings[4484] = {};\nWatuPRO.qArr = question_ids.split(',');\nWatuPRO.exam_id = 4484;\t    \nWatuPRO.post_id = 10334;\nWatuPRO.store_progress = 0;\nWatuPRO.curCatPage = 1;\nWatuPRO.requiredIDs=\"0\".split(\",\");\nWatuPRO.hAppID = \"0.47920600 1777627706\";\nvar url = \"https:\/\/www.dumpsbase.com\/freedumps\/wp-content\/plugins\/watupro\/show_exam.php\";\nWatuPRO.examMode = 1;\nWatuPRO.siteURL=\"https:\/\/www.dumpsbase.com\/freedumps\/wp-admin\/admin-ajax.php\";\nWatuPRO.emailIsNotRequired = 0;\nWatuPROIntel.init(4484);\nWatuPRO.inCategoryPages=1;});    \t \n<\/script>\n","protected":false},"excerpt":{"rendered":"<p>Passing GASF proctored exam is the requirement to get GIAC Advanced Smartphone Forensics certification exam. Being GASF Certified assures that you demonstrate an understanding of the fundamentals of mobile forensics, device file system analysis, mobile application behavior, event artifact analysis and the identification and analysis of mobile device malware. We have released new GASF dumps [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[7848,415],"tags":[9640,9641,9644,9643,9645,9642],"class_list":["post-10334","post","type-post","status-publish","format-standard","hentry","category-cyber-security-certification","category-giac","tag-gasf","tag-gasf-dumps","tag-gasf-dumps-questions","tag-gasf-exam-dumps","tag-gasf-exam-questions","tag-gasf-free-dumps"],"_links":{"self":[{"href":"https:\/\/www.dumpsbase.com\/freedumps\/wp-json\/wp\/v2\/posts\/10334","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.dumpsbase.com\/freedumps\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.dumpsbase.com\/freedumps\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.dumpsbase.com\/freedumps\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.dumpsbase.com\/freedumps\/wp-json\/wp\/v2\/comments?post=10334"}],"version-history":[{"count":1,"href":"https:\/\/www.dumpsbase.com\/freedumps\/wp-json\/wp\/v2\/posts\/10334\/revisions"}],"predecessor-version":[{"id":10336,"href":"https:\/\/www.dumpsbase.com\/freedumps\/wp-json\/wp\/v2\/posts\/10334\/revisions\/10336"}],"wp:attachment":[{"href":"https:\/\/www.dumpsbase.com\/freedumps\/wp-json\/wp\/v2\/media?parent=10334"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.dumpsbase.com\/freedumps\/wp-json\/wp\/v2\/categories?post=10334"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.dumpsbase.com\/freedumps\/wp-json\/wp\/v2\/tags?post=10334"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}