QUESTION 1

If an mobile device has an SIM - then that SIM can be valuable evidence all by themselves as they store vast amounts of information.

True

False

QUESTION 2

Data on a cell phone can only be collected logically due to the structure of the hard drive.

True

False

QUESTION 3

When doing an mobile investigation - you also want to consider records maintained by the carrier - particularly Call Detail Records (CDR).

True

False

QUESTION 4

When it comes to network forensics, having a tool that can capture and analyze network packets is one step towards monitoring the network for any potential attacks.

True

False

QUESTION 5

Unlike PCs it is very difficult to remotely collect from mobile devices (this does not take into consideration Craig Ball's article about collecting from iPhones using iTunes) which is why a proper mobile forensic investigations requires the phone to be in physical possession.

True

False