Exam 312-49v10 topic 1 question 796 discussion

Actual exam question from ECCouncil's 312-49v10

Question #: 796
Topic #: 1

You are a Computer Hacking Forensic Investigator working on a high-profile case involving an Android device. You discovered an SQLite database during your investigation. However, this database has an unusual extension type and does not display content using your current tools. You recall that you have the following tools at your disposal: Oxygen Forensics SQLite Viewer, DB Browser for SQLite, X-plore, SQLitePlus Database Explorer, and SQLite Viewer. Given that this particular SQLite database may contain important evidence, what should be your approach?

A. Switch between all the available tools until you find one that works with the unknown database extension
B. Use X-plore, as it offers root access which can provide access to the database
C. Stick to using Oxygen Forensics SQLite Viewer, which can analyze actual and deleted data
D. Use the SQLite ".dump" command to extract the data into a readable format

Show Suggested Answer

Suggested Answer: D 🗳️

by Elb at April 26, 2024, 8:45 p.m.

Comments

Submit Cancel

Elb

3 months, 1 week ago

Selected Answer: D

To extract the image data, use the SQLite “.dump” command

upvoted 1 times

...

Elb

4 months, 2 weeks ago

D < https://www.sqlitetutorial.net/sqlite-dump/

upvoted 1 times

...

Exam 312-49v10 All Questions

View all questions & answers for the 312-49v10 exam

Exam 312-49v10 topic 1 question 796 discussion

Comments

Elb

Elb

SY0-701