New Year Sale Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: simple70

GIAC Advanced Smartphone Forensics GASF Question # 14 Topic 2 Discussion

GIAC Advanced Smartphone Forensics GASF Question # 14 Topic 2 Discussion

GASF Exam Topic 2 Question 14 Discussion:
Question #: 14
Topic #: 2

Which of the following files provides the most accurate reflection of the device’s date/timestamp related to the

last device wipe?


A.

/private/var/mobile/Library/AddressBook/AddressBook.sqlitedb


B.

/private/var/mobile/Applications/com.apple.mobilesafari/Library/history.db


C.

/private/var/mobile/Applications/com.viber/Library/Prefernces/com.viber.plist


D.

/private/var/mobile/Applications/net.whatsapp.WhatsApp/Library/pw.dat


Get Premium GASF Questions

Contribute your Thoughts:


Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.