Question 1

One of the difficulties unique to forensic processing of mobile devices is:

Accepted Answer

A)  MD five hashes must be calculated for data recovered from mobile devices. 
B)  Documentation must show continuous possession and control. 
C)  An investigator must make a calculated decision to either prevent or allow the device to receive new data over wireless networks. 
D)  Any issues encountered with processing the device should be documented. 
A)  MD five hashes must be calculated for data recovered from mobile devices. 
B)  Documentation must show continuous possession and control. 
C)  An investigator must make a calculated decision to either prevent or allow the device to receive new data over wireless networks. 
D)  Any issues encountered with processing the device should be documented.

Question 2

Discuss the preservation, examination, and analysis issues that make processing mobile devices unique.

Accepted Answer

a "computer" as a communicatio

Question 3

The IEEE standard that specifies a standardized interface for testing integrated circuits, interconnections between components, and a means of observing and modifying circuit activity during a component's operation is:

Accepted Answer

A)  RG-45 
B)  FDDI 
C)  WiMAX 
D)  JTAG 
A)  RG-45 
B)  FDDI 
C)  WiMAX 
D)  JTAG

Question 4

The reason that malware developers are beginning to target mobile devices is:

Accepted Answer

A)  Because available memory is much smaller and the operating system is much less sophisticated on mobile devices, it is much easier to develop malicious code. 
B)  The malware market has become very crowded and developers are looking for new avenues. 
C)  Since the coding is much simpler on mobile devices, many new programmers are trying at this particular platform. 
D)  Since mobile devices are used more and more for online banking and making purchases, they have become prime targets for computer criminals. 
A)  Because available memory is much smaller and the operating system is much less sophisticated on mobile devices, it is much easier to develop malicious code. 
B)  The malware market has become very crowded and developers are looking for new avenues. 
C)  Since the coding is much simpler on mobile devices, many new programmers are trying at this particular platform. 
D)  Since mobile devices are used more and more for online banking and making purchases, they have become prime targets for computer criminals.

Question 5

A peculiarity of mobile devices is the format that they store SMS messages, which is:

Accepted Answer

A)  ASCII 
B)  Unicode 
C)  GSM 7-bit 
D)  Baudot 
A)  ASCII 
B)  Unicode 
C)  GSM 7-bit 
D)  Baudot

Question 6

Given the small amount of usable data obtainable from mobile devices, the forensic investigator needs to weigh the value of investing time examining mobile devices.

Accepted Answer

A) True 
 B)False

Question 7

Since mobile devices consist of a CPU, memory, storage, and software, the same as traditional computers, they are processed in exactly the same way.

Accepted Answer

A) True 
 B)False

Question 8

Powering down a mobile device and removing the battery may cause problems in that:

Accepted Answer

A)  When the battery is removed from a mobile device, the information in memory is lost. 
B)  Doing so may activate security measures such as lock codes and encryption. 
C)  The process of removing the battering can cause a capacitive discharge, destroying the device. 
D)  You now have two pieces of evidence, which have to be documented. 
A)  When the battery is removed from a mobile device, the information in memory is lost. 
B)  Doing so may activate security measures such as lock codes and encryption. 
C)  The process of removing the battering can cause a capacitive discharge, destroying the device. 
D)  You now have two pieces of evidence, which have to be documented.

Question 9

Which of the following is NOT one of the currently available methods for extracting data from mobile devices?

Accepted Answer

A)  Manual operation via user interface 
B)  Logical acquisition via communication port 
C)  Connecting the communication port directly to an output device such as a printer 
D)  Physical acquisition via the communication port 
A)  Manual operation via user interface 
B)  Logical acquisition via communication port 
C)  Connecting the communication port directly to an output device such as a printer 
D)  Physical acquisition via the communication port

Question 10

It is often possible to perform a forensic analysis of a physical duplicate of mobile devices using file system forensic tools.

Accepted Answer

A) True 
 B)False

Question 11

The dynamic nature of mobile device communications presents additional challenges for the forensic examiner.

Accepted Answer

A) True 
 B)False

Question 12

Software designed to monitor activities on mobile devices has come to be called:

Accepted Answer

A)  Malware 
B)  Spouseware 
C)  Trojan defense 
D)  None of the above 
A)  Malware 
B)  Spouseware 
C)  Trojan defense 
D)  None of the above

One of the difficulties unique to forensic processing of mobile devices is:

Discuss the preservation, examination, and analysis issues that make processing mobile devices unique.

The IEEE standard that specifies a standardized interface for testing integrated circuits, interconnections between components, and a means of observing and modifying circuit activity during a component's operation is:

The reason that malware developers are beginning to target mobile devices is:

A peculiarity of mobile devices is the format that they store SMS messages, which is:

Given the small amount of usable data obtainable from mobile devices, the forensic investigator needs to weigh the value of investing time examining mobile devices.

Since mobile devices consist of a CPU, memory, storage, and software, the same as traditional computers, they are processed in exactly the same way.

Powering down a mobile device and removing the battery may cause problems in that:

Which of the following is NOT one of the currently available methods for extracting data from mobile devices?

It is often possible to perform a forensic analysis of a physical duplicate of mobile devices using file system forensic tools.

The dynamic nature of mobile device communications presents additional challenges for the forensic examiner.

Software designed to monitor activities on mobile devices has come to be called:

Foundations of Digital Forensics

Language of Computer Crime Investigation

Digital Evidence in the Courtroom

Cybercrime Law: a United States Perspective

Cybercrime Law: a European Perspective

Conducting Digital Investigations

Handling a Digital Crime Scene

Investigative Reconstruction With Digital Evidence

Modus Operandi, Motive, and Technology

Violent Crime and Digital Evidence

Digital Evidence As Alibi

Sex Offenders on the Internet

Computer Intrusions

Cyberstalking

Computer Basics for Digital Investigators

Applying Forensic Science to Computers

Digital Evidence on Windows Systems

Digital Evidence on Unix Systems

Digital Evidence on Macintosh Systems

Network Basics for Digital Investigators

Applying Forensic Science to Networks

Digital Evidence on the Internet

Digital Evidence at the Physical and Data-Link Layers

Digital Evidence at the Network and Transport Layers

Filters

Exam 20: Digital Evidence on Mobile Devices

One of the difficulties unique to forensic processing of mobile devices is:

Discuss the preservation, examination, and analysis issues that make processing mobile devices unique.

The IEEE standard that specifies a standardized interface for testing integrated circuits, interconnections between components, and a means of observing and modifying circuit activity during a component's operation is:

The reason that malware developers are beginning to target mobile devices is:

A peculiarity of mobile devices is the format that they store SMS messages, which is:

Given the small amount of usable data obtainable from mobile devices, the forensic investigator needs to weigh the value of investing time examining mobile devices.

Since mobile devices consist of a CPU, memory, storage, and software, the same as traditional computers, they are processed in exactly the same way.

Powering down a mobile device and removing the battery may cause problems in that:

Which of the following is NOT one of the currently available methods for extracting data from mobile devices?

It is often possible to perform a forensic analysis of a physical duplicate of mobile devices using file system forensic tools.

The dynamic nature of mobile device communications presents additional challenges for the forensic examiner.

Software designed to monitor activities on mobile devices has come to be called:

Foundations of Digital Forensics

Language of Computer Crime Investigation

Digital Evidence in the Courtroom

Cybercrime Law: a United States Perspective

Cybercrime Law: a European Perspective

Conducting Digital Investigations

Handling a Digital Crime Scene

Investigative Reconstruction With Digital Evidence

Modus Operandi, Motive, and Technology

Violent Crime and Digital Evidence

Digital Evidence As Alibi

Sex Offenders on the Internet

Computer Intrusions

Cyberstalking

Computer Basics for Digital Investigators

Applying Forensic Science to Computers

Digital Evidence on Windows Systems

Digital Evidence on Unix Systems

Digital Evidence on Macintosh Systems

Network Basics for Digital Investigators

Applying Forensic Science to Networks

Digital Evidence on the Internet

Digital Evidence at the Physical and Data-Link Layers

Digital Evidence at the Network and Transport Layers

Filters