Computer Hacking Forensic Investigator (CHFI v10) — Question 138

Which layer of iOS architecture should a forensics investigator evaluate to analyze services such as Threading, File Access, Preferences, Networking and high- level features?

Answer options

• A. Core Services
• B. Media services
• C. Cocoa Touch
• D. Core OS

Correct answer: A

Explanation

The correct answer is A, Core Services, as it encompasses essential services like threading and file access that are crucial for forensics. The other options, such as Media Services and Cocoa Touch, focus more on multimedia functionalities and user interface elements, respectively, and do not provide the necessary low-level services required for a forensic analysis.