Week 3 Quiz
Started: Sep 22 at 8:39am
Quiz Instructions
This is a quiz on the material covered this week. The 20-question quiz includes, multiple
choice, multiple answer, true/false, short answer, and matching questi
...
Week 3 Quiz
Started: Sep 22 at 8:39am
Quiz Instructions
This is a quiz on the material covered this week. The 20-question quiz includes, multiple
choice, multiple answer, true/false, short answer, and matching questions. It is open
book/open notes and can be retaken once. It is worth 100 points, with each question
worth 5 points.
Flag this Question
Question 15 pts
An examiner must be thinking of _______, __________, ________ & ____________
when collecting mobile device as evidence.
Group of answer choices
Non-repudiation, Safety, integrity, availability
Identification, Evacuation, Preparation, and Containment
Intake, Identification, Preparation, Isolation
Fairness, Accurate, Balanced, Repeatable
Flag this Question
Question 25 pts
Which of the following are ways that an examiner can isolate the mobile device from
network connectivity?
Group of answer choices
Keep a powered off mobile device off and in an evidence container.
Place a password protected powered on mobile device in a metal can with RF-blocking
coating.
Place the powered on mobile device in the trunk of the examiner's vehicle.
Pull the battery on a powered on mobile device and put in an evidence envelope.
Flag this Question
Question 35 pts
Match the analysis method with the description.
Group of answer choices
Extracting files from unallocated space by file signatures.
Examining Internet cookies, Internet history, and other browsing artifacts.
Analyze files according to event logs, MACB times, EXIF data, to place files in
sequential order.
Determine the user of mobile device or account through login credentials.
Flag this Question
Question 45 pts
Match the level with method used for data extraction.
Group of answer choices
Visually seeing the content on the suspect's mobile device
An examiner connecting the suspect's mobile device to his/her forensic workstation and
extracting the data over a USB 3.0 connection.
File Carving
Web Analysis
Timeline Analysis
Device ownership possession
Manual Extraction
Logical Extraction
The examiner solders onto the suspect's PCB to connect directly with the CPU and
obtains a binar dump of the NAND flash memory.
The examiner physically removes the flash memory from the suspect's device; similar to
imaging a physical hard drive.
An examiner uses an electron microscope to record physical observation of gates on a
NAND chip.
Flag this Question
Question 55 pts
Match the term to its description:
Group of answer choices
Controls Radio Network Controllers and manages overall communciations throughout
the cellular network.
A central repository system for subscriber data and service information.
Hex Dumping JTAG
Chip-Off
Micro Read
MSC
The world collection of circuit-switched telephone networks also known as POTS.
A database that manage mobile devices' subscriber and service information when
roaming outside of their service area.
Flag this Question
Question 65 pts
Memory cards store all types of the following data except:
Group of answer choices
Bluetooth connection infor
[Show More]