AccessData Mobile Examiner (AME)

The AME credential demonstrates your proficiency with Mobile Phone

Examiner Plus as well as a general knowledge on process, cellular networks, technology and
procedure. Although there are no prerequisites, AME candidates will
Mobile Forensics 101 Course and/or the Mobile Phone Examiner Plus course as a foundation.
In preparation for the process, candidates are encouraged to test their knowledge of the skills
acquired in the Mobile Forensics 101 and Mobi
their course manuals for the above
also use the MPE+ videos located on the support page,

The study guide contains information
successfully pass the AME certification
questions but a guide that the student must
before attempting the AME examination.
student should gain enough knowledge
examination is not a replacement for a successful

STUDY GUIDE QUESTIONS
---------------------------------------

1. A mobile device utilizes towers and a cellular network to communicate.
difference between a cell site and a cell?
2. What is the cellular network made up of?
3. What is CDMA, GSM, iDEN, WCDMA, CDMA2000, TDMA, AMPS, UMTS?
4. Cellular records are maintained by the cellular carrier like Verizion, TMobile, O2 and
Orange. What are those records called
5. Subscriber Identity Modules or SIM card
other network information. What are some of the acronyms that identify the contacts,
AccessData Mobile Examiner (AME) STUDY GUIDE
The AME credential demonstrates your proficiency with Mobile Phone
Examiner Plus as well as a general knowledge on process, cellular networks, technology and
procedure. Although there are no prerequisites, AME candidates will benefit from taking the
Mobile Forensics 101 Course and/or the Mobile Phone Examiner Plus course as a foundation.
In preparation for the process, candidates are encouraged to test their knowledge of the skills
acquired in the Mobile Forensics 101 and Mobile Phone Examiner Plus course by reviewing
their course manuals for the above-mentioned courses. In addition to this study
os located on the support page, the MPE+ FAQ and LMS Quickstart.
contains information and questions that will enable the student to
certification. The study guide is not an answer book for the AME
the student must use to research, understand and comprehend
examination. If the student completes the guide in its
knowledge to successfully pass the AME certification
is not a replacement for a successful mobile device forensic training curriculum.
A mobile device utilizes towers and a cellular network to communicate.
difference between a cell site and a cell?
network made up of?
What is CDMA, GSM, iDEN, WCDMA, CDMA2000, TDMA, AMPS, UMTS?
Cellular records are maintained by the cellular carrier like Verizion, TMobile, O2 and
Orange. What are those records called and how can they be used?
Subscriber Identity Modules or SIM cards have several files that contain user data and
work information. What are some of the acronyms that identify the contacts,
The AME credential demonstrates your proficiency with Mobile Phone
Examiner Plus as well as a general knowledge on process, cellular networks, technology and
benefit from taking the
Mobile Forensics 101 Course and/or the Mobile Phone Examiner Plus course as a foundation.
In preparation for the process, candidates are encouraged to test their knowledge of the skills
le Phone Examiner Plus course by reviewing
guide, you may
the MPE+ FAQ and LMS Quickstart.
the student to
study guide is not an answer book for the AME
research, understand and comprehend
its entirety the
to successfully pass the AME certification. The AME
training curriculum.
Is there a
What is CDMA, GSM, iDEN, WCDMA, CDMA2000, TDMA, AMPS, UMTS?
Cellular records are maintained by the cellular carrier like Verizion, TMobile, O2 and
s have several files that contain user data and
work information. What are some of the acronyms that identify the contacts,
SMS, Call History, Last location the phone was turned off, serial number, subscriber
phone number, and subscriber serial number?
6. What is the serial number of s SIM card called and what is its purpose?
7. What components make up a GSM network?
8. What is the International Mobile Subscriber Identity?
9. What is a Forbidden Network on a SIM card?
10. A SIM card has security features. What are they?
11. When you receive a GSM to process for evidence is there an order to the processing?
12. Should you process the SIM, external media and the phone at the same time?
13. On a SIM card the first byte in a SMS message is called what?
14. What does this first byte in a SMS message tell you about the message?
15. What does isolating a mobile device mean?
16. Why would you isolate a mobile device from the cellular network?
17. What methods are available to isolate a mobile device from the cellular network?
18. How would you obtain a Personal Unlock (Unblock) Key?
19. What is a forensic SIM card and why is it important?
20. When a text message is deleted from a SIM card and another message is written over
the old message is it possible to recover partial data from the previous message?
21. Both GSM and CDMA devices have serial numbers. What are they called?
22. The mobile network contains routers, switches, antennas and more. Describe the path
of a call from a mobile phone to another mobile phone phone.
23. A SIM cards security features have a set number of attempts. What are they for each
security feature?
24. MPE+ can import many image types. What are they?
25. Why would you as an examiner want to output MPE+ temporary storage path to external
media?
26. How do you locate media files after extracting data using MPE+? What if the media is
embedded inside of another file?
27. If I wanted to find text within a MMS file that was not parsed with MPE+ where would you
look for this type of data? What view?
28. How do I process a SIM card with MPE+?
29. How do I process a mobile device with MPE+?
30. If I import a physical image of an Android or iOS device how can I easily parse the user
data from the image using MPE+?
31. What data views are available on the MPE+ toolbar?
32. What is the difference between the Timeline and Social visualization components in
MPE+?
33. If I wanted to filter all SMS messages based on a text containing shoes using MPE+ I
would have to do what?
34. If I wanted to locate all the deleted data in a SQLite database file using MPE+ I would
use what feature?
35. I want to find all the SMS, Call Logs, Emails and MMS that occurred on a specific date. I
would use what feature in MPE+?