Exam (elaborations)
AXIOM EXAM STUDY GUIDE QUESTIONS AND ANSWERS
- Course
- Institution
AXIOM EXAM STUDY GUIDE QUESTIONS AND ANSWERS
[Show more]
Content preview
Name: Score:215 Multiple choice questions
Term 1 of 215
Similar to Apple owning all of the source code for iOS, Google owns all of the source code for
Android.
True
False
Term 2 of 215
Which of the following is one of the fastest growing sources of data in forensic examinations?
Large Data
Big Data
Relational Data
Cloud Data
Term 3 of 215
An analyst reviews a Portable Case and tags several items as evidence. You want to include the
work of the analyst in the parent case. What option to you use to do this?
Merge portable case
Merge tags and comments
.dat
Merge all data
,Term 4 of 215
What file does a user double-click on to view a Portable Case?
Index.html
Portablecase.bat
Excutecase.bat
OpenCase.bat
Term 5 of 215
If you want to export a document's metadata to a report on your computer, which option do
you use?
Save artifact to ...
Export Metadata
Create report / export
Compile Metadata
Term 6 of 215
Cookies can be used to determine if a user has visited a specific web site.
True
False
Term 7 of 215
You conduct a keyword search for All Content and there are hits located in unallocated space
that have no associated artifact. Where will these results be displayed?
These Hits Will Not Be Displayed.
Keyword Snippets
Uncategorized Keyword Hits
Jump List
,Term 8 of 215
You are in File System explorer and see a file that AXIOM did not create an artifact for. Is it
possible to create an artifact from this file?
Yes. An examiner can create an artifact from a file in File System explorer. This is done by
right-clicking on the file and selecting, "Save file as artifact."
No. All artifacts must be parsed and created by AXIOM. The examiner has no ability to
create artifacts.
Term 9 of 215
Since many of the techniques used by examiners for iOS exams rely on Apple's built in backup
features, the forensic capabilities of each iOS version are consistent from version-to-version.
True
False
Term 10 of 215
Where is the Master Boot Record (MBR) located?
Offset 0 of unpartitioned space.
Offset -10 of unpartitioned space.
Offset -5 of unpartitioned space.
Offset 100 of unpartitioned space.
Term 11 of 215
Which of the following is not an identifying value of an Apple device?
IMEI (International Mobile Equipment Identity)
Cellular telephone number.
MEID (Mobile Equipment Identifier)
Serial number assigned by Apple.
UDID (Unique Device Identifier)
, Term 12 of 215
AXIOM Process allows the user to set up the data for Acquisition (imaging) and Processing in
the same single step.
True
False
Term 13 of 215
What two methods can be used to access a user's account for a cloud extraction?
Conversation View
Artifact Reference
Token
Username and Password
Signal Password
Term 14 of 215
AXIOM only recovers pictures from allocated space. The program cannot carve for pictures.
True
False
Term 15 of 215
You process a case and begin reviewing the results. Upon doing so, you notice that when you
added the evidence, you entered the wrong Scan Information. Is it possible to edit this
information now that processing has completed?
True
False
Term 16 of 215
From a Windows PreFetch file, it is possible to determine when a program was run.
True
False
The benefits of buying summaries with Stuvia:
Guaranteed quality through customer reviews
Stuvia customers have reviewed more than 700,000 summaries. This how you know that you are buying the best documents.
Quick and easy check-out
You can quickly pay through credit card or Stuvia-credit for the summaries. There is no membership needed.
Focus on what matters
Your fellow students write the study notes themselves, which is why the documents are always reliable and up-to-date. This ensures you quickly get to the core!
Frequently asked questions
What do I get when I buy this document?
You get a PDF, available immediately after your purchase. The purchased document is accessible anytime, anywhere and indefinitely through your profile.
Satisfaction guarantee: how does it work?
Our satisfaction guarantee ensures that you always find a study document that suits you well. You fill out a form, and our customer service team takes care of the rest.
Who am I buying these notes from?
Stuvia is a marketplace, so you are not buying this document from us, but from seller selftest. Stuvia facilitates payment to the seller.
Will I be stuck with a subscription?
No, you only buy these notes for $9.00. You're not tied to anything after your purchase.
Can Stuvia be trusted?
4.6 stars on Google & Trustpilot (+1000 reviews)
75057 documents were sold in the last 30 days
Founded in 2010, the go-to place to buy study notes for 14 years now