312-49V11: Computer Hacking Forensic InvestigatorDemo

By ECCouncil · Question Mode

QuestionQ170

Digital Evidence

A multinational technology corporation suspects that a former executive may have obtained unauthorized access to confidential company information. The executive is under investigation for potentially transmitting private data after changing from an Android smartphone to an iOS smartphone. The forensic investigation team must carefully examine the digital data to support its allegations.

Which of the following statements about iOS and Android file systems is most accurate in this scenario?

  • A iOS file systems incorporate encryption mechanisms such as File-Vault, enhancing data security but complicating forensic examination.
  • B Android file systems permit direct access to user data without the need for specialized tools, facilitating easier forensic analysis compared to iOS.
  • C Android file systems rely on Ext4, while iOS file systems utilize APFS.
  • D Both Android and iOS file systems employ journaling mechanisms to maintain data integrity and facilitate recovery.
Explanation

iOS devices use APFS volumes for storage. Android supports ext4 as a Linux-based filesystem and ext4 is commonly used on Android devices, though Android can support additional filesystem types. FileVault specifically applies to macOS, Android data is not ordinarily available through unrestricted direct access, and APFS is based on copy-on-write rather than traditional journaling.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!