CHFI Section 5: Quiz 1

i wanna sleep pls let me be done with this already

1. Which of the following application framework blocks in Android architecture controls the life cycle of the applications running in a device?

Telephony manager ✔ Activity manager Window manager Notification manager

2. Which of the following components of a SIM file system is next to the MF in the hierarchy and contains the header that holds information related to the file structure and security?

Service provider name Master file ✔ Dedicated file Elementary file

3. Which of following techniques allows investigators to capture data such as files and folders that can be accessed by users but not the deleted files, deleted data, or system files from a mobile device?

File Carving /span> Disk Degaussing Data carving ✔ Logical acquisition

4. Identify the SQLite file that contains currently logged-in users in the Alexa device, and whenever a user signs out, the data in the database is erased.

(Dev note: You on your own idk the answer. The one that is "correct" is the one I choose, and got wrong so like dont chose that.)

map_data_storage.db complications.db ✔ DataStore.db gservices.db

5. Identify the forensic artifacts recovered from an Android Wear that contains data associated with Bluetooth connected devices.

android_pay, config.db, fitness.db, reminders.db ✔ bt_did.conf, bt_stack.conf calllog.db, contacts2.db, profile.db googlesettings.db, subscribedfeeds.db, gservices.db