Free GIAC GIME Exam Dumps Questions & Answers

Which macOS tool is typically used to analyze APFS volumes for file system artifacts?

• A.  fsck_apfs
• B.  XCode
• C.  Disk Utility
• D.  Terminal

During system triage, what information can provide insights into device management?

• A.  Screen saver settings
• B.  Media library
• C.  Management profiles
• D.  Installed games

During an investigation, you need to determine when a user typically uses their macOS device for online shopping.
What steps will you take to establish this pattern of life? (Choose three)

• A.  Analyze Screen Time data to identify peak usage hours
• B.  Extract geolocation data to confirm the user's location during purchases
• C.  Check the /var/log/cron logs for shopping-related tasks
• D.  Check Wi-Fi logs for activity during specific timeframes
• E.  Review Safari browsing history for e-commerce sites

What type of data can be extracted from the Maps application in iOS for forensic purposes?

• A.  Text messages
• B.  Location history and routes
• C.  Browser history
• D.  Contact details

How can investigators use data from communication applications in their analysis?

• A.  To determine the CPU model
• B.  To understand user's communication patterns
• C.  To assess audio settings
• D.  To check the power supply unit