Computer Hacking Forensic Investigator (CHFI) — Question 59

Which layer of iOS architecture should a forensics investigator evaluate to analyze services such as Threading, File Access, Preferences, Networking and high- level features?

Answer options

• A. Core Services
• B. Media services
• C. Cocoa Touch
• D. Core OS

Correct answer: D

Explanation

The correct answer is D, Core OS, as it encompasses the foundational services that support threading, file access, and networking. The other options, such as Core Services and Cocoa Touch, provide higher-level functionalities but do not focus on the core system services essential for in-depth forensic analysis.