CCE Mobile Device Forensics 2

Question 1

What does ADB stand for, and what is its primary use in Android forensics?

Accepted Answer

Android Debug Bridge — for communication between a computer and an Android device

Answer

Advanced Device Bridge — for device backup creation

Answer

Application Data Base — for structured database extraction

Answer

Android Data Backup — for creating encrypted device backups

Question 2

Which Android directory typically stores private data for user-installed applications, including databases and preferences?

Accepted Answer

/data/data

Answer

/system/app

Answer

/sdcard/Android

Answer

/proc/data

Question 3

When is a chip-off acquisition typically used in mobile forensics compared to other methods?

Accepted Answer

When logical and JTAG methods have failed or are unavailable

Answer

As the preferred first method for all Android devices

Answer

Only for SIM card data extraction

Answer

Exclusively for cloud-based evidence acquisition

Question 4

What types of forensically relevant data can typically be found on a mobile device's SIM card?

Accepted Answer

Contact lists, SMS messages, and last dialed numbers

Answer

Application data, photos, and browsing history

Answer

Encrypted email content and full call recordings

Answer

Device encryption keys and biometric templates

Question 5

Which mobile data acquisition method uses the device's own operating system APIs to access and export user data?

Accepted Answer

Logical extraction

Answer

Physical extraction

Answer

JTAG extraction

Answer

Chip-off extraction

Question 6

What is the primary forensic purpose of storing a mobile device in a Faraday bag during transport and storage?

Accepted Answer

To isolate the device from all electromagnetic signals including cellular, WiFi, and Bluetooth

Answer

To protect the device from physical shock and impact

Answer

To maintain proper chain of custody documentation

Answer

To prevent battery drain during long-term storage

Question 7

What database format is most commonly used by Android applications to store structured local data?

Accepted Answer

SQLite

Answer

MySQL

Answer

PostgreSQL

Answer

MongoDB