Android

Question 1

Why is android forensics so important ?

Answer 1

Because it is the most widely used OS on different devices.

Question 2

On which devices can the Android OS be found?

Answer 2

• smartphones
• tablets
• eReaders
• car’s
• Washers and Dryers
• Fridges

Question 3

What is the latest version of android?

Answer 3

The latest version is android 13.

Question 4

Name 5 supported File Systems by android.

Answer 4

• YAFFS
• YAFFS2
• F2FS
• EXT4
• FAT32

Question 5

What are the main features of EXT4?

Answer 5

• More stable
• High performance
• Most commonly used
• support for large files
• faster file access time

Question 6

What are the main features of FAT32?

Answer 6

• it is supported by almost every OS
• commonly used for USB Flash drives
• low overhead, do more disk space

Question 7

What are the main features of YAFFS2 ?

Answer 7

• it is opensource
• wear leveling
• journaling
• small memory footprint

Question 8

Where can the evidence be found on a android device?

Answer 8

• Shared preference
• Internal storage
• External storage
• SQlite files
• Network

Question 9

What are the 4 methodes of acquisition on android ?

Answer 9

• Logical
• Physical
• JTAG
• Chip-off