Exam 20: Mobile Device Forensics

Since the 1960s, the concepts of handoff and frequency reuse allowed users to move between ________ without dropping a call.

You can't use a 1G phone to track a 15-year-old crime.

Match the word in Column 1 to its definition in Column 2. Each answer can only be used once. A)A cellular network facility that allows users to send and receive text messages B)A software mechanism that defines the way files are named, stored, organized, and accessed C)A set of standards for second-generation cellular networks D)Assessment of the actual geographical location of a mobile device E)A custom-designed program that controls the components of mobile devices and facilitates how they function. F)A snapshot of the file system of a mobile device G)A storage expansion card for a mobile device H)The traditional method of modulating radio signals so that they can carry information I)A term describing a wireless Local Area Network J)A spread-spectrum technology for cellular networks K)A duplicate of data located on a mobile device L)The smart card that is inserted into a mobile device that identifies the user account to the network, handles authentication, and provides storage for basic user data and network information M)The basic components of a mobile device N)A communication channel that can provide higher-speed data communication than a standard telephone circuit O)A system for determining position by comparing radio signals from several satellites -SD card

Analog phones have divergent feature sets. The core features usually were phone, e-mail, text, and camera.

Match the word in Column 1 to its definition in Column 2. Each answer can only be used once. A)A cellular network facility that allows users to send and receive text messages B)A software mechanism that defines the way files are named, stored, organized, and accessed C)A set of standards for second-generation cellular networks D)Assessment of the actual geographical location of a mobile device E)A custom-designed program that controls the components of mobile devices and facilitates how they function. F)A snapshot of the file system of a mobile device G)A storage expansion card for a mobile device H)The traditional method of modulating radio signals so that they can carry information I)A term describing a wireless Local Area Network J)A spread-spectrum technology for cellular networks K)A duplicate of data located on a mobile device L)The smart card that is inserted into a mobile device that identifies the user account to the network, handles authentication, and provides storage for basic user data and network information M)The basic components of a mobile device N)A communication channel that can provide higher-speed data communication than a standard telephone circuit O)A system for determining position by comparing radio signals from several satellites -SIM card

When ________ was launched in Japan in 2001, moving photos over the network, streaming video and television, video chat, and other advanced services now could be supported.

2G and 3G phones are closest in architecture and design to a PC.

Each SIM has an international mobile subscriber identity (IMSI)number that associates the phone with the subscriber's mobile ________.

By cloning the SIM card, the investigator retains a perfect copy for evidentiary purposes.

Tools such as ________ and MPE+ greatly simplify mobile forensic work.

2G appeared in the 1990s using two standards: GSM & CDMA.

It may not be possible to recover deleted file items from a mobile device, such as:

Physical extraction is a snapshot of the file system showing what the file system wants you to see.

Match the word in Column 1 to its definition in Column 2. Each answer can only be used once. A)A cellular network facility that allows users to send and receive text messages B)A software mechanism that defines the way files are named, stored, organized, and accessed C)A set of standards for second-generation cellular networks D)Assessment of the actual geographical location of a mobile device E)A custom-designed program that controls the components of mobile devices and facilitates how they function. F)A snapshot of the file system of a mobile device G)A storage expansion card for a mobile device H)The traditional method of modulating radio signals so that they can carry information I)A term describing a wireless Local Area Network J)A spread-spectrum technology for cellular networks K)A duplicate of data located on a mobile device L)The smart card that is inserted into a mobile device that identifies the user account to the network, handles authentication, and provides storage for basic user data and network information M)The basic components of a mobile device N)A communication channel that can provide higher-speed data communication than a standard telephone circuit O)A system for determining position by comparing radio signals from several satellites -Operating system

Even though some mobile devices are really small computers with computer-like operating systems, they can usually be examined using typical computer forensic tools.

What would an investigator do with the SIM card to retain a perfect copy for evidentiary purposes?

When should an examiner do a physical extraction versus a logical extraction, or both?

When working with mobile devices, ________ searching is probably the most useful source of information available to the investigator.

Match the word in Column 1 to its definition in Column 2. Each answer can only be used once. A)A cellular network facility that allows users to send and receive text messages B)A software mechanism that defines the way files are named, stored, organized, and accessed C)A set of standards for second-generation cellular networks D)Assessment of the actual geographical location of a mobile device E)A custom-designed program that controls the components of mobile devices and facilitates how they function. F)A snapshot of the file system of a mobile device G)A storage expansion card for a mobile device H)The traditional method of modulating radio signals so that they can carry information I)A term describing a wireless Local Area Network J)A spread-spectrum technology for cellular networks K)A duplicate of data located on a mobile device L)The smart card that is inserted into a mobile device that identifies the user account to the network, handles authentication, and provides storage for basic user data and network information M)The basic components of a mobile device N)A communication channel that can provide higher-speed data communication than a standard telephone circuit O)A system for determining position by comparing radio signals from several satellites -Logical extraction

An integrated circuit identification (ICCID)number is located on each SIM.