Free GIAC GASF Exam Dumps Questions & Answers


Exam Code/Number:	GASFJoin the discussion
Exam Name:	GIAC Advanced Smartphone Forensics
Certification:	GIAC
Free Question Number:	75
Publish Date:	Aug 13, 2026
# of views:	3088
Rating 100%

Page: 1 / 15
Total 75 questions

Question 1

Which iOS backup file will contain the last time the device was backed up?

A.notes.sqlite
B.info.plist
C.manifest.mbdb
D.status.plist

Question 2

Which file, found natively on most Android devices, will contain location history such as coordinates, physical addresses and timestamps?

A./data/data/com.google.android.apps.maps/databases/search_history.db
B./data/data/com.google.android.location/files/DATA_Preferences
C./data/data/com.google.android.apps.maps/databases/da_destination_history
D./data/data/com.vznavigator.ADR6300/databases/NIMSTORE.db

Question 3

Cellebrite's Physical Analyzer will conduct a Quick Scan for images, which goes through and carves files that may have been deleted from the device. When carving for image files, which of the following methods is most effectively used to recover data?

A.Update the signature database
B.Carve based on file header
C.Carve based on file metadata
D.Carve based on memory ranges

Question 4

What type of acquisition has occurred for this device?

A.Bypass lock
B.Physical
C.File system
D.Logical

Question 5

An Android device user is known to use Facebook to communicate with other parties under examination.
There is no evidence of the Facebook application on the phone. If there was Facebook usage where would an examiner expect to find these artifacts?

A.dmappmgr.db
B.AndroidManifest.xml
C./data/system/packages.xml
D.com.android.chrome/app_chrome/Default/Local Storage