GIAC Advanced Smartphone Forensics
Domain 2Objective 2
Android Device File System Artifacts GASF Practice Questions (Page 11)
Part of the Mobile Device File System Analysis domain, which makes up ~37% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~19–30 in this domain), expect 6–10 from this objective — we provide 53 practice questions to prepare you well beyond it. (estimate)
53questions here
11free pages
12concepts
Questions 51–53
- 51
Which of the following is a standard method for an Android app to store structured data locally in a relational database?
Select an answer first - 52
What is the primary difference between Full Disk Encryption (FDE) and File-Based Encryption (FBE) on Android?
Select an answer first - 53
An examiner is analyzing an Android app that stores user preferences in SharedPreferences. The examiner wants to recover the preferences from a backup file. Which file should the examiner look for in the backup?
Select an answer first
Finished these 3 questions?
Review the revealed explanations, or continue through the curriculum.
No more pagesBack to GASF
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GASF” is a trademark of its owner, used for identification only.