IoT Forensics CHFI Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   In an IoT investigation, which type of data is most likely to be found in the device's non-volatile storage?

   • ANetwork packets currently in transit
   • BCurrent RAM contents
   • CFirmware and configuration settings
   • DThe user's social media passwords
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   What is the primary goal of analyzing IoT malware during an incident investigation?

   • ATo update the device firmware to prevent future attacks
   • BTo recover deleted files from the device
   • CTo identify the attack vector and the extent of compromise
   • DTo identify the device manufacturer
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   Which forensic technique is used to extract data from a mobile app's local storage?

   • APerforming a factory reset to access the app's data
   • BUsing a SIM card reader to extract app data
   • CAnalyzing the phone's radio frequency emissions
   • DCreating a logical image of the phone's user data partition
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   Which protocol is commonly used by IoT devices for lightweight messaging and is a valuable source of forensic evidence?

   • AFTP
   • BSNMP
   • CMQTT
   • DSMTP
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   Which method is commonly used to acquire volatile data from an IoT device?

   • AAnalyzing the device's packaging for serial numbers
   • BRemoving the flash memory chip and reading it with a programmer
   • CReading the device's RAM over a debug interface while the device is running
   • DPerforming a factory reset to clear all data
   Reveal Solution Discussion Select an answer first