GIAC GIME 問題練習

Question No : 1
When analyzing encrypted containers, why is knowledge of the specific encryption algorithm used important?

• A.It determines the color depth of files.
• B.It influences the brute force attack time.
• C.It affects file naming conventions.
• D.It changes the container's metadata structure.

答えを確認する

正解:

Question No : 2
What can be inferred from analyzing the configuration of a Mail application?

• A.Processor architecture
• B.User's communication habits and contacts
• C.Graphics card performance
• D.Number of installed browsers

答えを確認する

正解:

Question No : 3
Which command can you use to gather detailed system information about a macOS device during a triage?

• A.sudo systeminfo
• B.sudo system_profiler
• C.sudo sysdiagnose
• D.sudo systemctl status

答えを確認する

正解:

Question No : 4
What type of data is most commonly stored in iCloud backups?

• A.System logs
• B.Device settings, messages, and app data
• C.Operating system updates
• D.Raw disk images

答えを確認する

正解:

Question No : 5
Which tool is commonly used to analyze and parse system logs to create a forensic timeline on macOS?

• A.fsck
• B.Log Parser
• C.Plist Editor
• D.Log-Analysis-Toolkit

答えを確認する

正解:

Question No : 6
What distinguishes the APFS cloning feature from a standard file copy in the context of forensic analysis?

• A.Cloning is faster but less secure.
• B.Clones share data blocks, requiring less physical space.
• C.Cloning allows for file versioning.
• D.Clones are encrypted by default.

答えを確認する

正解:

Question No : 7
What kind of artifact can be analyzed from the Contacts application on an Apple device?

• A.Browser cookies
• B.Contact names and call records
• C.GPS tracking data
• D.File download history

答えを確認する

正解:

Question No : 8
How can the Notes application data be significant in a forensic analysis?

• A.Tracking location data
• B.Understanding user behavior
• C.Revealing network information
• D.Analyzing textual content and creation dates

答えを確認する

正解:

Question No : 9
Where are Safari browser downloads typically stored on macOS?

• A./private/var/tmp
• B./Library/Safari/Downloads
• C./Users/[username]/Downloads
• D./System/Library/Downloads

答えを確認する

正解:

Question No : 10
What type of data would be analyzed in the Reminders application?

• A.Reminder notes and due dates
• B.Encryption algorithms
• C.System error logs
• D.Network throughput rates

答えを確認する

正解:

Question No : 11
What type of data can be extracted from the Wallet application?

• A.Transaction history
• B.Passwords
• C.Health data
• D.Email correspondences

答えを確認する

正解:

Question No : 12
Which artifacts are commonly analyzed to reconstruct a user’s pattern of life on macOS and iOS? (Select two)

• A.Application usage history
• B.System uptime logs
• C.Bluetooth pairing logs
• D.Geolocation metadata from photos

答えを確認する

正解:

Question No : 13
For system triage, how can one identify the presence of network profiles?

• A.Checking the firewall status
• B.Inspecting network preferences
• C.Reviewing browser cookies
• D.Analyzing email configurations

答えを確認する

正解:

Question No : 14
Where can the primary macOS system logs be found for analysis?

• A./private/var/log/
• B./usr/local/log/
• C./System/Library/Logs/
• D./etc/syslog/

答えを確認する

正解:

Question No : 15
In macOS, what mechanism provides system-level and user-specific settings that can influence forensic analysis?

• A.Spotlight
• B.Launch Agents and Daemons
• C.Notification Center
• D.Mission Control

答えを確認する

正解: