Computer Hacking Forensic Investigator (CHFI v10) — Question 601

In a forensic investigation on an Android device, a Computer Hacking Forensics Investigator is required to extract information from the SQLite database. They aim to recover the user's web browsing history. Which is the correct SQLite database path that the investigator should focus on?

Answer options

• A. \data\com.android.providers.calendar\databases\calendar.db
• B. \data\data\com.android.browser\databases\browser2.db
• C. \data\data\com.android.providers.telephony\databases\mmssms.db
• D. \data\data\com.android.providers.contacts\databases\contacts2.db

Correct answer: B

Explanation

The correct answer is B, as the path \data\data\com.android.browser\databases\browser2.db is where the web browsing history is stored for the Android browser. Options A, C, and D refer to other types of data, such as calendar events, SMS messages, and contacts, which do not contain web browsing history.