ACI Mobile Device Forensics 2

Question 1

What is a logical acquisition of a mobile device?

Accepted Answer

Copying accessible files and folders using the device's operating system APIs

Answer

Extracting raw binary data directly from flash memory chips

Answer

Physically removing the storage chip and reading it directly

Answer

Accessing device memory through JTAG test access ports

Question 2

Which database format is used by both iOS and Android applications to store structured data such as messages, contacts, and call logs locally on the device?

Accepted Answer

SQLite

Answer

MySQL

Answer

Oracle DB

Answer

PostgreSQL

Question 3

What is the IMEI number's primary value in a mobile device forensic investigation?

Accepted Answer

To uniquely identify a specific mobile device's hardware globally

Answer

To encrypt device communications and protect user data

Answer

To track the device's real-time GPS location

Answer

To identify which SIM card is currently installed in the device

Question 4

Which SQLite database on an iPhone stores both SMS and iMessage communications?

Accepted Answer

sms.db

Answer

AddressBook.sqlitedb

Answer

voicemail.db

Answer

notes.sqlite

Question 5

What is 'chip-off' forensics in the context of mobile device examination?

Accepted Answer

Physically removing the flash memory chip from the circuit board and reading it directly

Answer

Removing and analyzing the SIM card separately

Answer

Disabling the device's security encryption chip via software

Answer

Extracting data through the device's charging port connection

Question 6

Where are deleted files typically recoverable from when performing a physical acquisition of a mobile device?

Accepted Answer

In the unallocated space of the device's flash storage

Answer

In the device's recycle bin or trash folder

Answer

In cloud backup files synced automatically

Answer

Only in the device's volatile RAM

Question 7

Which iOS artifact stores a record of the device's historical location data using cell tower and Wi-Fi triangulation?

Accepted Answer

consolidated.db (location database)

Answer

com.apple.Maps.plist

Answer

SystemVersion.plist

Answer

Keychain-2.db