FiltersDone

Question type

Essay

Multiple Choice

Short Answer

True False

Matching

Exam 20: Mobile Device Forensics

Show Answer

Share

---

All types

Filters

Study FlashcardsPractice ExamLearn

Question 21

Essay

Review LaterAdd Note

Review Later

When should an examiner do a physical examination versus a logical examination,or both?

Correct Answer

verified

Logical images are fairly fast for most ...

View Answer

Show Answer

Question 22

Essay

Review LaterAdd Note

Review Later

If there is a GPS capability on a smartphone,how might the investigator use it in the investigation?

Correct Answer

verified

GPS can locate the user's activities,and...

View Answer

Show Answer

Question 23

Short Answer

Review LaterAdd Note

It often is desirable to ________ the SIM in much the same way one would take a physical image of the mobile device or a computer.

What is another name for a temporal chain of events?

Mobile devices began as an outgrowth of ship-to-shore radios in World War I.

Causal chains of evidence describe the events of a crime in terms of cause and effect.

Users of mobile devices need to manually perform various forms of housekeeping from small simple tasks like doing routine checks of address books and contacts to larger tasks such as connecting to local WiFi connections,formatting storage,clearing out device memory,or forcing background programs to close.

What value can be gleaned from each generation of mobile device (1G,2G,3G,and 4G)? What are their strengths and weaknesses?

________ devices were the first to use an operating system.

When a mobile device is set to use WiFi,it will recognize any WiFi network in its range may not be able to join the network because of the security settings on the WiFi ________ point,but the mobile device will see it and note that it exists.When that happens,the device takes note of the network and logs it.

Physical extraction is a snapshot of the file system showing what the file system wants you to see.

In 2001,mobile Broadband networks (3G) arrived on the scene in what country?

What would an investigator do the SIM card to retain a perfect copy for evidentiary purposes?

What feature on a mobile device can help an investigator establish a timeline?

Describe the two different types of chain of evidence and how they can be used in the investigative process.

It may not be possible to recover deleted file items from a mobile device,such as:

What does 1G consist of?

Each SIM card has an international mobile subscriber identity number that associates the phone with the subscriber's mobile network.

Feature phones have divergent - based upon the phone - feature sets.These core features usually are:

3G and 4G mobile devices have the ability to download and install ________,the same as a PC or MAC.