AccessData A30-327 Online Practice Questions and Exam Preparation

AccessData A30-327 Online Questions & Answers

• Question 31:

  FTK Imager can be invoked from within which program?

  A. FTK
  B. DNA
  C. PRTK
  D. Registry Viewer
  A. FTK

• Question 32:

  Which type of evidence can be added to FTK Imager?

  A. individual files
  B. all checked items
  C. contents of a folder
  D. all currently listed items
  C. contents of a folder

• Question 33:

  What are three types of evidence that can be added to a case in FTK? (Choose three.)

  A. local drive
  B. registry MRU list
  C. contents of a folder
  D. acquired image of a drive
  E. compressed volume files (CVFs)
  A. local drive
  C. contents of a folder
  D. acquired image of a drive

• Question 34:

  What are two functions of the Summary Report in Registry Viewer? (Choose two.)

  A. adds individual key values
  B. is a template for other registry files
  C. displays investigator keyword search results
  D. permits searching of registry values based on key headers
  A. adds individual key values
  B. is a template for other registry files

• Question 35:

  Which three items are contained in an Image Summary File using FTK Imager? (Choose three.)

  A. MD5
  B. CRC
  C. SHA1
  D. Sector Count
  E. Cluster Count
  A. MD5
  C. SHA1
  D. Sector Count

• Question 36:

  Which two options are available in the FTK Report Wizard? (Choose two.)

  A. List by File Path
  B. List File Properties
  C. Include HTML File Listing
  D. Include PRTK Output List
  A. List by File Path
  B. List File Properties

• Question 37:

  You examine evidence and flag several graphic images found in different folders. You now want to bookmark these items into a single bookmark.

  Which tab in FTK do you use to view only the flagged thumbnails?

  A. Explore tab
  B. Graphics tab
  C. Overview tab
  D. Bookmark tab
  C. Overview tab

• Question 38:

  What is the purpose of the Golden Dictionary?

  A. maintains previously created level information
  B. maintains previously created profile information
  C. maintains a list of the 100 most likely passwords
  D. maintains previously recovered passwords
  D. maintains previously recovered passwords

• Question 39:

  Which pattern does the following regular expression recover? (\d{4}[\- ]){3}\d{4}

  A. 000-000-0000
  B. ddd-4-3-dddd-4-3
  C. 000-00000-000-ABC
  D. 0000-0000-0000-0000
  D. 0000-0000-0000-0000

• Question 40:

  How can you use FTK Imager to obtain registry files from a live system?

  A. You use the Export Files option.
  B. You use the Advanced Recovery option.
  C. Registry files cannot be exported from a live system.
  D. You use the Protected Storage System Provider option.
  A. You use the Export Files option.