A forensic investigator is tasked with logically acquiring data from an Android device involved in a cybercrime incident. The device is passcode protected, and the suspect refuses to reveal the passcode. How should the investigator proceed?
A.
Enable USB debugging on the Android device and use adb commands to gain root access and extract data
B.
Connect the Android device to a computer with iTunes installed to perform a backup and extract data
C.
Use an adb pull command to download all the data, including system files and deleted data
D.
Use the adb push command to extract data from the device without bypassing the passcode
It is an Android developer feature that can be activated from the Developer Options menu. USB debugging allows an Android device to establish communication with a computer/workstation that runs Android Software Developer Kit (SDK). Therefore, the investigators should enable the USB debugging mode during evidence acquisition.
upvoted 1 times
...
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Elb
6 months ago