Exam 20: Mobile Device Forensics

Just because an app is written for Apple's iOS operating system does not mean that it runs equally well or behaves the same on the iPad and iPhone.

What does SIM stand for?

Since the ________, the concepts of handoff and frequency reuse allowed users to move between cells without dropping calls.

Match the word in Column 1 to its definition in Column 2. Each answer can only be used once. A)A cellular network facility that allows users to send and receive text messages B)A software mechanism that defines the way files are named, stored, organized, and accessed C)A set of standards for second-generation cellular networks D)Assessment of the actual geographical location of a mobile device E)A custom-designed program that controls the components of mobile devices and facilitates how they function. F)A snapshot of the file system of a mobile device G)A storage expansion card for a mobile device H)The traditional method of modulating radio signals so that they can carry information I)A term describing a wireless Local Area Network J)A spread-spectrum technology for cellular networks K)A duplicate of data located on a mobile device L)The smart card that is inserted into a mobile device that identifies the user account to the network, handles authentication, and provides storage for basic user data and network information M)The basic components of a mobile device N)A communication channel that can provide higher-speed data communication than a standard telephone circuit O)A system for determining position by comparing radio signals from several satellites -Architecture

SD cards and SIM cards perform the same way.

________ phones have divergent (based upon the phone)feature sets. The core features are usually phone, e-mail, text, and camera.

If there is a GPS capability on a smartphone, how might the investigator use it in the investigation?

One interesting aspect of mobile device forensics is geolocation. Some devices and many apps report out the geographical location of the device. That can make it much easier to track the owner's movements.

When working on electronic devices, what should you use to dissipate any static charge that might damage electronic chips?

What type of network devices started using operating systems?

Match the word in Column 1 to its definition in Column 2. Each answer can only be used once. A)A cellular network facility that allows users to send and receive text messages B)A software mechanism that defines the way files are named, stored, organized, and accessed C)A set of standards for second-generation cellular networks D)Assessment of the actual geographical location of a mobile device E)A custom-designed program that controls the components of mobile devices and facilitates how they function. F)A snapshot of the file system of a mobile device G)A storage expansion card for a mobile device H)The traditional method of modulating radio signals so that they can carry information I)A term describing a wireless Local Area Network J)A spread-spectrum technology for cellular networks K)A duplicate of data located on a mobile device L)The smart card that is inserted into a mobile device that identifies the user account to the network, handles authentication, and provides storage for basic user data and network information M)The basic components of a mobile device N)A communication channel that can provide higher-speed data communication than a standard telephone circuit O)A system for determining position by comparing radio signals from several satellites -Analog

Each SIM card has an international mobile subscriber identity number that associates the phone with the subscriber's mobile network.

All mobile devices use SIM cards.

________ forensic images are bit-by-bit copies of the file system, including deleted data.

What feature on a mobile device can help an investigator establish a timeline?

What value can be gleaned from each generation of mobile device (1G, 2G, 3G, and 4G)? What are their strengths and weaknesses?

________ devices were the first to use an operating system.

Because a mobile device is similar a computer and transmits wireless signals, what laws does an investigator need to follow?

Even though mobile devices are really small computers with computer-like OSs, they usually cannot be examined using typical computer forensic tools. Elaborate on some of the differences between examining a 4G smartphone and a computer.

Working on what type of surface increases the danger of static electricity?