71 practice questions for GIAC Advanced Smartphone Forensics (GASF) certification, with full explanations.
Every question comes with the correct answer, the reasoning behind it, and a short note on why each wrong option is wrong. Work through it once with the answers, then again with the questions-only copy under exam conditions.
- 71 questions mapped to the GASF exam certification objectives
- Answers and explanations for every question, including the wrong options
- A questions-only PDF for timed practice runs
- Instant delivery by email the moment you check out
- Free monthly updates for as long as the exam is live
- Pass or your money back
A GASF attempt costs US$999 (US$899 for a retake). This pack is US$39, paid once.
Try 10 questions free before you buy.
Last updated September 2026 · 71 questions
What makes the GASF hard
GASF is the GIAC certification paired with the SANS FOR585 smartphone forensics course, and like every GIAC exam it is open book: hardcopy books and personal notes are allowed, the internet and electronic files are not. That changes how candidates prepare.
The exam is 75 questions in two hours with a 69% pass mark, which leaves about 96 seconds a question, so a good index into notes matters more than memorising, and the questions are written so that looking everything up will run out the clock.
The objectives follow a phone from acquisition to report: mobile forensics fundamentals and acquisition methods, Android and iOS file system and artefact analysis, third-party application analysis, malware and spyware detection, event and location artefact analysis, and cloud-stored data and tool validation. Questions frequently show a table, hex or a database row and ask what it means, so recognising artefact structures on sight is what passes this exam.
About the exam
GASF (GIAC Advanced Smartphone Forensics) validates forensic examination of mobile phones and tablets: mobile forensics fundamentals, Android and iOS file system and artefact analysis, application analysis, malware and spyware detection, event artefact analysis, and reporting. There are no prerequisites; it is aligned to SANS FOR585.
Exam certification objectives
- Mobile forensics fundamentals and acquisition
- Android file system and artefact analysis
- iOS file system and artefact analysis
- Third-party application and database analysis
- Malware and spyware detection
- Event, location and timeline artefact analysis
- Backups, cloud data and tool validation
GIAC does not publish weightings. 75 questions, 120 minutes, open book (hardcopy only), passing score 69%, US$999 per attempt, ProctorU remote or Pearson VUE test centre, certification valid for four years.
Reviews
There are no reviews yet.