312-49V11: Computer Hacking Forensic InvestigatorDemo

By ECCouncil · Question Mode

QuestionQ353

Logs and Network Forensics

During a digital-forensics examination at a technology laboratory in Denver, Colorado, investigators are analyzing an unpaired Android smartwatch recovered from a suspect. To reconstruct which devices were connected and when new connections were created, which component of the Android-watch framework should they inspect?

  • A Message API
  • B Image generation
  • C Data API
  • D Node API
Explanation

The Node API (NodeClient) identifies Android-powered devices connected to a Wear OS network and broadcasts connection events, including when a new device joins or an existing device goes offline. Those records are relevant to identifying connected devices and establishing connection timing.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!