Mobile Forensics

What is ICCID on a SIM card?

• Integrated Circuit Card Identifier
• Integrated Cellular Card Interface Device
• International Cellular Card Identifier
• International Cellular Circuit Identifier

It is best to power off iPhones upon seizure

• True
• False

What does SIM card stand for?

• System Information Manager
• Subscriber Identity Module
• Secure Identification Method
• Signal Integration Module

What is the first step in mobile device forensic investigations?

• Bypassing encryption
• Performing a factory reset
• Securing the device and isolating it from the network
• Rooting or jailbreaking the device

Which of the following is a common tool used for mobile device forensic analysis?

• Wireshark
• EnCase
• Cellebrite UFED
• Kali Linux

In mobile device forensics, what is the primary purpose of placing a phone in "airplane mode"?

• To save battery during the investigation
• To prevent remote wiping or tampering
• To make the device run faster
• To access encrypted files

Which of the following is NOT a common source of evidence in iPhones?

• Call logs
• SMS and MMS messages
• SIM card data
• microSD card

Which technique is used to recover deleted data from mobile devices?

• Network analysis
• File carving
• Packet sniffing
• Device resetting

What is the primary function of a Faraday bag in mobile device forensics?

• To prevent the phone from overheating
• To block incoming signals and protect the integrity of data
• To secure the phone from physical damage
• To allow communication with a seized device

In mobile forensics, what is the significance of "logical extraction"?

• It retrieves all data including deleted and hidden files
• It retrieves data that is accessible through the phone's user interface
• It bypasses encryption to access hidden content
• It clones the entire content of the phone for analysis