GIAC Advanced Smartphone Forensics (GASF)

Here you have the best GIAC GASF practice exam questions

  • You have 68 total questions to study from
  • Each page has 5 questions, making a total of 14 pages
  • You can navigate through the pages using the buttons at the bottom
  • This questions were last updated on October 13, 2025
  • This site is not affiliated with or endorsed by GIAC.
Question 1 of 68
Based on the image below, which file system is being examined?
Exam GASF: Question 1 - Image 1
    Correct Answer: A

Question 2 of 68
The device pictured below is in Download Mode to attempt a physical acquisition. What can be ascertained by viewing the Android boot screen below?
Exam GASF: Question 2 - Image 1
    Correct Answer: C

Question 3 of 68
An analyst investigating a Nokia S60 Symbian device wants to know if an Adobe Flash file on the handset is compromised. Which file in the image will best target the Adobe Flash files?
Exam GASF: Question 3 - Image 1
    Correct Answer: A

Question 4 of 68
As part of your analysis of a legacy BlackBerry device, you examine the installed applications list and it appears that no third-party applications were installed on the device. Which other file may provide you with additional information on applications that were accessed with the handset?
    Correct Answer: C

Question 5 of 68
Which artifact must be carved out manually when examining a file system acquisition of an Android device?
    Correct Answer: C