AccessData A30-327 Online Practice Questions and Exam Preparation

AccessData A30-327 Online Questions & Answers

• Question 51:

  FTK Imager allows a user to convert a Raw (dd) image into which two formats? (Choose two.)

  A. E01
  B. Ghost
  C. SMART
  D. SafeBack
  A. E01
  C. SMART

• Question 52:

  When using Registry Viewer to view a key with 20 values, what option can be used to display only 5 of the 20 values in a report?

  A. Report
  B. Special Reports
  C. Summary Report
  D. Add to ReportWith Children
  C. Summary Report

• Question 53:

  In FTK, which two formats can be used to export an E-mail message? (Choose two.)

  A. raw format
  B. XML format
  C. PDF format
  D. HTML format
  E. binary format
  A. raw format
  D. HTML format

• Question 54:

  You have processed a case in FTK using all the default options. The investigator supplies you with a list of 400 names in an electronic format. What is the quickest way to search unallocated space for all of these names?

  A. build adtSearch string with all 400 names
  B. create a Regular Expression with all the names
  C. make an imported text file of the names in Live Search
  D. use an imported text file containing the names in Indexed Search
  D. use an imported text file containing the names in Indexed Search

• Question 55:

  While analyzing unallocated space, you locate what appears to be a 64-bit Windows date and time. Which FTK Imager feature allows you display the information as a date and time?

  A. INFO2 Filter
  B. Base Converter
  C. Metadata Parser
  D. Hex Value Interpreter
  D. Hex Value Interpreter

• Question 56:

  In FTK, which tab provides specific information on the evidence items, file items, file status and file category?

  A. E-mail tab
  B. Explore tab
  C. Overview tab
  D. Graphics tab
  C. Overview tab

• Question 57:

  In FTK, you navigate to the Graphics tab at the Case level and you do not see any graphics. What should you do to see all graphics in the case?

  A. list all descendants
  B. run the graphic files filter
  C. check all items in the current list
  D. select the Graphics container button
  A. list all descendants

• Question 58:

  In FTK, which search broadening option allows you to find grammatical variations of the word "kill"such as "killer," "killed," and "killing"?

  A. Phonic
  B. Synonym
  C. Stemming
  D. Fuzzy Logic
  C. Stemming

• Question 59:

  Which statement is true about Processes to Perform in FTK?

  A. Processing options can be chosen only when adding evidence.
  B. Processing options can be chosen during or after adding evidence.
  C. Processing options can be chosen only after evidence has been added.
  D. If processing is not performed while adding evidence, the case must be started again.
  B. Processing options can be chosen during or after adding evidence.

• Question 60:

  Which two image formats contain an embedded hash value for file verification? (Choose two.)

  A. E01
  B. S01
  C. ISO
  D. CUE
  E. 001 (dd)
  A. E01
  B. S01