Skip to main content
ITPrepCerts
Login
Exams Free Samples About Contact
Login Create an account

GASF GIAC Advanced Smartphone Forensics

  • GIAC
  • 6 free sample questions

About this exam

GASF is the GIAC exam GIAC Advanced Smartphone Forensics. Paid practice material for this exam is not available yet, but you can try its free sample questions.

Exam code
GASF
Vendor
GIAC
Practice questions
Not available yet
Free sample questions
6
Question bank last updated
Not available yet

Try 2 sample questions

Taken from the free sample set for GASF.

Question 1

Physical Analyzer provides a function to narrow down a search based on a timestamp, a type, a party or date.

What is the name of this advanced searching capability?

  1. Option A:

    Watchlist Editor

  2. Option B:

    Tags

  3. Option C:

    Timeline

  4. Option D:

    Event of Interest

Show answer and explanation

Correct answer: C

Physical Analyzer offers the Timeline feature to narrow down what happened on the smartphone during a specific time, type, party, etc.

This is commonly used to narrow down time periods. Data that is manually carved will not be shown here.

There is also an option to create a custom timeline specification.

Question 2

Which artifact(s) can be extracted from a logical image only if the device the image was acquired from was jailbroken?

  1. Option A:

    SMS/MMS

  2. Option B:

    Email

  3. Option C:

    Call Logs

  4. Option D:

    Photos

Show answer and explanation

Correct answer: B

Photos, SMS/MMS and call logs can be extracted from a logical acquisition of a non-jailbroken device. Once a device

has been jailbroken, email can be extracted for review

See all 6 free sample questions