GIAC iOS and macOS Examiner
Domain 1Objective 2
Introduction to Disk and File Systems GIME Practice Questions (Page 7)
Part of the Apple Operating System Fundamentals domain, which makes up ~20% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–16 in this domain), expect 3–5 from this objective — we provide 33 practice questions to prepare you well beyond it. (estimate)
33questions here
7free pages
3concepts
Questions 31–33
- 31
An examiner is analyzing a macOS system and needs to determine the exact time a file was deleted from an APFS volume. Which data source is most reliable?
Select an answer first - 32
Which characteristic is unique to a sparse disk image compared to a standard DMG?
Select an answer first - 33
A forensic examiner has a DMG file that is suspected to contain a HFS+ file system. The examiner needs to mount the DMG on a macOS system for analysis. Which of the following commands will mount the DMG read-only? Select all that apply.
Select an answer first
Finished these 3 questions?
Review the revealed explanations, or continue through the curriculum.
No more pagesBack to GIME
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GIME” is a trademark of its owner, used for identification only.