plist files (T/F) There are no registry files in iOS like there are in Windows True (T/F) SQLite databases always have the file extension.

plist files within the iOS file system? (Select all)ĭ) Binary. The passcode is only needed for encrypted backups A) You cannot extract data because a Pairing Certificate could not be established When imaging an iOS device using AXIOM, when is the option full image available?ī) Only for devices running iOS 10.0 or olderĭ) Only when the device is jailbroken D) Only when the device is jailbroken (T/F) There are jailbreaks available for all iOS versions and devices False What are the two types of. Once plugged in, the computer accesses the deviceĭ) You can extract data. True If an examiner knows that a computer contains an encrypted iOS backup, where in AXIOM Process is the examiner able to enter a password to decrypt and process the backup?ĭ) AXIOM will not process encrypted backups B) Mobile Backup Passwords (T/F) The passcode assigned to an iTunes backup is different from the passcode on the device and different from the iCloud password True (T/F) It is possible to reset an iTunes backup password with all versions of iOS False (T/F) All drivers need to extract data from an iOS device are included with AXIOM False You plug an iOS device into a computer but don't know the passcode when prompted to 'Enter iPhone Passcode to Trust This Computer.' How does this impact extraction of data from the device?Ī) You cannot extract data because a Pairing Certificate could not be establishedī) You cannot extract data because the iTunes drivers could not be copied to the deviceĬ) You can extract data. Which of the following is the format of an iOS UDID?Ĭ) 2C7D24D2346E0F4F8FE727EC0F3435AD22E1BF3Cĭ) 12a8 iPhone5/5C/5S/6/6+/7 C) 2C7D24D2346E0F4F8FE727EC0F3435AD22E1BF3C (T/F) The location of an iOS backup on a Windows computer depends on how iTunes was installed.

Apple serial number mystery by forensic