QUESTION NO: 1
During Apple Systems Triage, what is essential for identifying user accounts?
During Apple Systems Triage, what is essential for identifying user accounts?
Correct Answer: B
Vote an answer
QUESTION NO: 2
During an incident response investigation, which macOS artifacts can provide evidence of malware execution? (Select two)
During an incident response investigation, which macOS artifacts can provide evidence of malware execution? (Select two)
Correct Answer: B,D
Vote an answer
QUESTION NO: 3
Which log file is essential for identifying malware behavior on macOS during an incident response?
Which log file is essential for identifying malware behavior on macOS during an incident response?
Correct Answer: D
Vote an answer
QUESTION NO: 4
What type of encryption is used by default on modern macOS drives?
What type of encryption is used by default on modern macOS drives?
Correct Answer: A
Vote an answer
QUESTION NO: 5
What type of event artifacts are generated by Spotlight on macOS? (Select two)
What type of event artifacts are generated by Spotlight on macOS? (Select two)
Correct Answer: C,D
Vote an answer
QUESTION NO: 6
Which command is used to mount a disk image on macOS for forensic analysis?
Which command is used to mount a disk image on macOS for forensic analysis?
Correct Answer: C
Vote an answer
QUESTION NO: 7
During an investigation of an iPhone, you need to gather evidence of a suspect's recent locations. The Maps application shows several recent trips, but you are unsure of their exact destinations.
Which steps will you take to analyze the Maps application data to confirm the locations? (Select three correct answers)
During an investigation of an iPhone, you need to gather evidence of a suspect's recent locations. The Maps application shows several recent trips, but you are unsure of their exact destinations.
Which steps will you take to analyze the Maps application data to confirm the locations? (Select three correct answers)
Correct Answer: A,D,E
Vote an answer
QUESTION NO: 8
In incident response, what indicates a potential security breach in an Apple operating system?
In incident response, what indicates a potential security breach in an Apple operating system?
Correct Answer: D
Vote an answer
QUESTION NO: 9
What macOS feature is crucial for isolating and analyzing suspicious applications during an incident response?
What macOS feature is crucial for isolating and analyzing suspicious applications during an incident response?
Correct Answer: D
Vote an answer