An Incident Responder Successfully Acquired Application Binaries Off a Mobile

question 43

Multiple Choice

An incident responder successfully acquired application binaries off a mobile device for later forensic analysis. Which of the following should the analyst do NEXT?

• A) Decompile each binary to derive the source code.
• B) Perform a factory reset on the affected mobile device.
• C) Compute SHA-256 hashes for each binary.
• D) Encrypt the binaries using an authenticated AES-256 mode of operation.
• E) Inspect the permissions manifests within each application.

---

Definitions:

High-Potential

An individual or asset deemed to have significant capabilities or value for future growth or success.

Demand Note

A type of loan agreement where the loan can be called for repayment by the lender at any time.

Maximum Amount

The highest possible quantity or value that can be reached or allowed.

Commercial Banks

Financial institutions that provide various financial services, including deposit accounts, loans, and currency exchange.