Section B (Scenarios and Practice)
[35 marks]
Question 7
You are given that a crime was committed and in the commission of the crime an iOS device
was recovered. Given the following different scenarios, state what action can be taken to
preserve information on the device in each case:
a. Device turned on and unlocked,
b. Device turned on and locked,
c. Device turned off and without passcode,
d. Device turned off and with passcode.
[20]
Question 8
Rev~rse Engine~ring_is i~port_ant in mobil~ for~_nsicsarid might be !he only w_ayevidence on
a phone may be accessible. However, it does affect the digital forensics investigative process.
a. Besides rooting and starting the device in recovery mode, explain three ways
passcodes in Android. phones can be circum.vented.
[6]
b. How can each of the methods you identified in a. be prevented.
[3]
c. Rooting a phone is one way of circumventing passcodes,
i. Explain three ways of rooting an Android phone.
[3]
ii. List three potential dangers of rooting a phone.
[3]
<<<<<<<<END>>>>>>>>
Page I 5