AccessData ADC A30-327 Questions & Answers

• Question 11:

  When using PRTK to attack encrypted files exported from a case, which statement is true?

  A. PRTK will request the user access control list from FTK.

  B. PRTK will generate temporary copies of decrypted files for printing.

  C. FTK will stop all active jobs to allow PRTK to decrypt the exported files.

  D. File hash values will change when they are saved in their decrypted format.

  E. Additional interoperability between PRTK andNTAccess becomes available when files begin decrypting.

  Correct Answer: D

• Question 12:

  What is the most effective method to facilitate successful password recovery?

  A. Art of War

  B. Entropy Test

  C. Advanced EFS Attack

  D. Primary Dictionary Attack

  Correct Answer: A

• Question 13:

  You are attempting to access data from the Protected Storage System Provider (PSSP) area of a registry.

  How do you accomplish this using PRTK?

  A. You drop the SAM file onto the PRTK interface.

  B. You drop the NTUSER.dat file onto the PRTK interface.

  C. You use the PSSP Attack Marshal from Registry Viewer.

  D. This area can not be accessed with PRTK as it is a registry file.

  Correct Answer: B

• Question 14:

  What is the purpose of the Golden Dictionary?

  A. maintains previously created level information

  B. maintains previously created profile information

  C. maintains a list of the 100 most likely passwords

  D. maintains previously recovered passwords

  Correct Answer: D

• Question 15:

  Which Registry Viewer function would allow you to automatically document multiple unknown user names?

  A. Add to Report

  B. Export User List

  C. Add to Report with Children

  D. Summary Report with Wildcard

  Correct Answer: D

• Question 16:

  In PRTK, which type of attack uses word lists?

  A. dictionary attack

  B. key space attack

  C. brute-force attack

  D. rainbow table attack

  Correct Answer: A

• Question 17:

  You view a registry file in Registry Viewer. You want to create a report, which includes items that you have marked "Add to Report." Which Registry Viewer option accomplishes this task?

  A. Common Areas

  B. Generate Report

  C. Define Summary Report

  D. Manage Summary Reports

  Correct Answer: B

• Question 18:

  When using Registry Viewer to view a key with 20 values, what option can be used to display only 5 of the 20 values in a report?

  A. Report

  B. Special Reports

  C. Summary Report

  D. Add to ReportWith Children

  Correct Answer: C

• Question 19:

  What are two functions of the Summary Report in Registry Viewer? (Choose two.)

  A. adds individual key values

  B. is a template for other registry files

  C. displays investigator keyword search results

  D. permits searching of registry values based on key headers

  Correct Answer: AB

• Question 20:

  Which data in the Registry can the Registry Viewer translate for the user? (Choose three.)

  A. calculate MD5 hashes of individual keys

  B. translate the MRUs in chronological order

  C. present data stored in null terminated keys

  D. present the date and time of each typed URL

  E. View Protected Storage System Provider (PSSP) data

  Correct Answer: BCE