Chapter 19 - Digital/Multimedia Forensics

Question 1

Early mobile phone systems were followed by digital _____ networks.

Answer 1

2G

Question 2

True or False: The architectural functionality that distinguishes 2G from 3G is that 2G systems were circuit switched and 3G systems are packet switched.

Answer 2

True

Question 3

True or False: One of the benefits of packet switching is the ability to connect more readily to the Internet.

Answer 3

True

Question 4

It’s (easy, difficult ) to stay current with the available mobile device models.

Answer 4

difficult

Question 5

Apple has taken major steps to standardize the development of apps for its and _____ .

Answer 5

iPad; iPhone

Question 6

Some devices and many apps report the _____ of the device. That can make it much easier to track the owner’s movements.

Answer 6

geolocation

Question 7

When working on a mobile device, there are several sources of information available to the investigator. Probably the most useful source of information available to an investigator is _____ .

Answer 7

Web searching

Question 8

An examiner should decide whether to obtain a _____ extraction or _____ extraction or both of a mobile device.

Answer 8

physical; logical

Question 9

T or F: If you have a device that supports physical extraction, that is the way to image the device. Logical extractions are useful only when the physical option is not available because of the device itself.

Answer 9

True

Question 10

T or F: physical extractions are bit-by-bit copies of the file system including deleted data.

Answer 10

True

Question 11

Examiners make it a practice to run an extracted image (once, twice).

Answer 11

twice

Question 12

The _____ extraction is fairly fast and one might want to examine it for obvious evidence while a tool is making a physical image of the target.

Answer 12

logical

Question 13

Just like computers, the _____ defines the basic components of the mobile device.

Answer 13

architecture

Question 14

_____ are storage expansion cards that many mobile devices can accept.

Answer 14

SD or secure digital cards

Question 15

SD cards are “nonvolatile,” meaning that even if the power is turned off on the device, you won’t lose your favorite tunes or your pictures.

Answer 15

True

Question 16

In many cases, you can keep your subscriber information when you change mobile phones by simply switching the _____ card to the new phone.

Answer 16

SIM

Question 17

Often it is desirable to _____ the SIM in much the same way as one would take a physical image of the mobile device or a computer in order to retain a copy for evidentiary purposes.

Answer 17

clone

Question 18

T or F: It’s always possible to recover deleted file items such as e-mails, texts, and photos from a mobile device.

Answer 18

False

Question 19

_____ describes the events and concomitant evidence that make up the events of the crime.

Answer 19

chain of evidence

Question 20

_____ chains show events in the order in which they occurred.

Answer 20

temporal

Question 21

_____ chains of evidence describe the events of a crime in terms of cause and effect.

Answer 21

casual

Question 22

_____ crime assessment attempts to tie elements of a crime together into a single crime scene and use the timelines to build a picture and describe the events and supporting evidence of the crime.

Answer 22

hybrid

Question 23

It is likely that the mobile device is extremely accurate as a yardstick for measuring when events happen as the device may be synchronized to a _____ clock.

Answer 23

network

Question 24

When a mobile device is set to use _____ , it will recognize any _____ network in its range.

Answer 24

WiFi, WiFi

Question 25

T or F: Mobile device forensic analysis can provide an overlay to physical evidence, and timelines (as well as computer forensic timelines) can give a clearer picture of the events preceding and following a crime event.

Answer 25

True

Question 26

What are the 1G highlights?

Answer 26

-analog networks -only cell towers -no WiFi

Question 27

A mobile device is made up of:

Answer 27

a computer and one or more radios.

Question 28

2G _____ could do more than simple outgoing incoming calls.

Answer 28

feature phones

Question 29

What are the 2G highlightrs?

Answer 29

-send/receive SMS (text) -synch with e-mail -No web surfing -No ability to send photos -blackberry

Question 30

What is the distinction between 2G and 3G?

Answer 30

2G = circuit switched (landline) 3G = packet switched (internet)

Question 31

4G or native IP network features:

Answer 31

access internet directly, increasing speed and bandwidth

Question 32

What phones are the closest in architecture and design to a PC?

Answer 32

3G, 4G, 5G phones

Question 33

A snapshot of the same view that the user gets is a _____.

Answer 33

logical extraction

Question 34

Whats the acronym for SIM card

Answer 34

subscriber identity module

Question 35

Working on what type of surface increases the danger of static electricity?

Answer 35

carpet

Question 36

When working on electronic devices, what should you use to dissipate any static charge that might damage electronic chips?

Answer 36

Grounded anti-static wristband

Question 37

SIM stands for:

Answer 37

subscriber identity module.

Question 38

What would an investigator do the SIM card to retain a perfect copy for evidentiary purposes?

Answer 38

Clone the SIM

Question 39

What does the ICCID contain?

Answer 39

IIN (issuer identification number)

Question 40

What feature on a mobile device can help an investigator establish a timeline?

Answer 40

GPS

Question 41

It may not be possible to recover deleted file items from a mobile device such as emails, texts and photos.

Answer 41

True

Question 42

SD cards and SIM cards perform the same way.

Answer 42

False

Question 43

Even though some mobile devices are really small computers with computer-like operating systems, they usually can be examined using typical computer forensic tools.

Answer 43

False

Question 44

The amount of information we can get from a mobile device varies greatly with the device in question.

Answer 44

true

Question 45

Secure Digital (SD) cards are storage expansion cards that many mobile devices can accept. The SD card adds memory for storing such things as photos and music. SD cards are nonvolatile.

Answer 45

True