最新的GIAC GIME免費考試真題

問題1

Which command is used to kill a malicious process on macOS during an active incident response?

A. sudo rm

B. sudo killall

C. sudo sysctl

D. sudo mv

正確答案: B

問題2

Which SQL function is used to count the number of items in a selected set?

A. SUM()

B. AVG()

C. MAX()

D. COUNT()

正確答案: D

問題3

Which log type is essential for understanding application behavior on a Mac?

A. Console logs

B. Security logs

C. Firewall logs

D. System logs

正確答案: D

問題4

Which artifacts are commonly analyzed to reconstruct a user's pattern of life on macOS and iOS? (Select two)

A. Bluetooth pairing logs

B. System uptime logs

C. Geolocation metadata from photos

D. Application usage history

正確答案: C,D

問題5

Where can iOS system configuration data typically be found during forensic analysis?

A. /private/var/mobile/Library/Preferences/

B. /etc/system/settings/

C. /private/etc/iOSconfig.plist

D. /System/Library/Configuration/

正確答案: A

問題6

What can be inferred from analyzing the configuration of a Mail application?

A. Processor architecture

B. Number of installed browsers

C. Graphics card performance

D. User's communication habits and contacts

正確答案: D

問題7

During an investigation of an iPhone, you need to gather evidence of a suspect's recent locations. The Maps application shows several recent trips, but you are unsure of their exact destinations.
Which steps will you take to analyze the Maps application data to confirm the locations? (Select three correct answers)

A. Review call logs for related phone numbers

B. Use timestamp data to correlate trips with other device activities

C. Analyze web browsing history for location-based searches

D. Compare GPS data with the suspect's physical movements via Wi-Fi connection logs

E. Extract GPS coordinates from the Maps application history

正確答案: B,D,E

問題8

What artifact within the Apple File System indicates application usage?

A. Kernel extensions

B. Spotlight index

C. User preferences

D. System logs

正確答案: B

問題9

In incident response, what indicates a potential security breach in an Apple operating system?

A. Frequent system updates

B. Consistent network performance

C. Unexpected new user accounts

D. Regularly scheduled backups

正確答案: C

問題10

For system triage, how can one identify the presence of network profiles?

A. Checking the firewall status

B. Inspecting network preferences

C. Reviewing browser cookies

D. Analyzing email configurations

正確答案: B

問題11

What is the significance of examining event artifacts in a forensic analysis?

A. Determining the physical location of the device

B. Tracing user activities and interactions with the system

C. Analyzing the device's security posture

D. Understanding user preferences

正確答案: B

最新的GIAC iOS and macOS Examiner - GIME免費考試真題

聯系我們

站內鏈接

最新更新