GIAC iOS and macOS Examiner (GIME) Free Practice Test

Question 1

Which artifact indicates the OS backup frequency during system triage?

A. Time Machine settings

B. System migration assistant

C. Application update logs

D. Disk utility reports

Correct Answer: A

Question 2

Which log file contains information about system events such as shutdowns, startups, and system updates on macOS?

A. /private/var/log/com.apple.system.log

B. /etc/crontab

C. /Library/Logs/DiagnosticReports/

D. /var/log/system.log

Correct Answer: D

Question 3

During an investigation, you need to determine when a user typically uses their macOS device for online shopping.
What steps will you take to establish this pattern of life? (Choose three)

A. Check the /var/log/cron logs for shopping-related tasks

B. Extract geolocation data to confirm the user's location during purchases

C. Review Safari browsing history for e-commerce sites

D. Check Wi-Fi logs for activity during specific timeframes

E. Analyze Screen Time data to identify peak usage hours

Correct Answer: C,D,E

Question 4

Which technique is commonly used to access encrypted data during forensic analysis?

A. Social engineering

B. Network sniffing

C. Brute force attack

D. Phishing

Correct Answer: C

Question 5

Which macOS file system is commonly used on modern macOS devices for efficient storage and encryption support?

A. HFS+

B. NTFS

C. EXT4

D. APFS

Correct Answer: D

Question 6

Which macOS log files should be analyzed to track application crashes during forensic analysis?

A. /private/var/log/app_crashes.log

B. /etc/security/crashlog.log

C. /Library/Logs/DiagnosticReports/

D. /System/Logs/app_error.log

Correct Answer: C

Question 7

Which tool is commonly used to analyze and parse system logs to create a forensic timeline on macOS?

A. Log Parser

B. fsck

C. Plist Editor

D. Log-Analysis-Toolkit

Correct Answer: A

Question 8

How can calendar application data assist in a forensic investigation?

A. By revealing scheduled events and associated metadata

B. By displaying graphic card specifications

C. By providing software version information

D. By showing Wi-Fi passwords

Correct Answer: A

Welcome to TestSimulate

GIAC iOS and macOS Examiner (GIME) Free Practice Test