Android Device Application Analysis GASF Practice Questions (Page 7)

Questions 31–35

1. 31foundation · easy

   In Android, where does an app store its private SQLite databases by default?

   • A/data/user/0/<package>/files/
   • B/sdcard/Android/data/<package>/databases/
   • C/data/data/<package>/databases/
   • D/system/app/<package>/databases/
   Reveal Solution Discussion Select an answer first
2. 32foundation · easy

   What is the primary file format used by Android apps to store structured relational data?

   • AXML
   • BCSV
   • CSQLite
   • DJSON
   Reveal Solution Discussion Select an answer first
4. 33expert · hard

   A forensic examiner is reconstructing a user's activities on an Android device. The device has a navigation app, a ride-sharing app, and a social media app. The navigation app stores location history in an internal SQLite database. The ride-sharing app stores trip receipts in its external storage folder. The social media app stores cached location data in its cache directory. The examiner needs to build a timeline of the user's physical movements. Which combination of data sources provides the most reliable and complete timeline?

   • AUse only the navigation app's database because it is the most detailed and reliable source of location history.
   • BCorrelate the navigation app's database timestamps with the ride-sharing app's trip receipts and the social media app's cached location data.
   • CUse the ride-sharing app's trip receipts because they are stored in external storage and are easier to access.
   • DUse the social media app's cache because it updates frequently and provides the most continuous location data.
   Reveal Solution Discussion Select an answer first
5. 34foundation · easy

   How does Android's permission system affect forensic acquisition of app data?

   • APermissions prevent forensic tools from acquiring any data from a device
   • BPermissions restrict which apps can access certain data, but forensic tools can often extract data using system-level access
   • CPermissions allow forensic tools to bypass the sandbox without root
   • DPermissions are only relevant to cloud data, not on-device storage
   Reveal Solution Discussion Select an answer first
6. 35foundation · easy

   What is the primary purpose of Android Auto Backup?

   • ATo back up app data to the user's Google Drive account
   • BTo back up the entire device to a PC
   • CTo back up the operating system
   • DTo back up only photos and videos
   Reveal Solution Discussion Select an answer first