Mobile Forensics CHFI Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   Which of the following is an example of application data that can be extracted from a mobile device?

   • AChat history from a messaging app
   • BThe device's IMEI number
   • CThe operating system kernel version
   • DContacts stored in the phone's address book
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   What is a mobile device backup?

   • AA method to erase all data from the device
   • BA copy of the device's data stored on a computer or cloud
   • CA duplicate of the device's hardware
   • DA security feature that prevents unauthorized access
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   What capability does the mobile forensics tool Oxygen Forensic Detective provide?

   • AReal-time GPS tracking
   • BNetwork traffic analysis
   • CPassword cracking for Wi-Fi networks
   • DCloud data extraction from mobile devices
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   During which phase of mobile forensics does the examiner document the device's condition and take photographs?

   • AAnalysis
   • BReporting
   • CSeizure
   • DAcquisition
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   An examiner has a SIM card from a suspect's phone and needs to recover call records and subscriber information. The SIM card is protected by a PIN. Which step should the examiner take first?

   • ADocument the SIM card's ICCID and IMSI, then attempt to read it with a SIM reader using known default PINs.
   • BPlace the SIM in a compatible phone and use the phone's menu to view call logs.
   • CInsert the SIM into a forensic SIM reader and use software to bypass the PIN.
   • DContact the mobile network operator to obtain the call records directly.
   Reveal Solution Discussion Select an answer first