Pass the AccessData AccessData Certification A30-327 Questions and answers with CertsForce

Viewing page 2 out of 2 pages
Viewing questions 11-20 out of questions
Questions # 11:

When using PRTK to attack encrypted files exported from a case, which statement is true?

Options:

A.

PRTK will request the user access control list from FTK.


B.

PRTK will generate temporary copies of decrypted files for printing.


C.

FTK will stop all active jobs to allow PRTK to decrypt the exported files.


D.

File hash values will change when they are saved in their decrypted format.


E.

Additional interoperability between PRTK and NTAccess becomes available when files

begin decrypting.


Expert Solution
Questions # 12:

Which three items are displayed in FTK Imager for an individual file in the Properties

window? (Choose three.)

Options:

A.

flags


B.

filename


C.

hash set


D.

timestamps


E.

item number


Expert Solution
Questions # 13:

Which statement is true about using FTK Imager to export a folder and its subfolders?

Options:

A.

Exporting a folder will copy all its subfolders.


B.

Each subfolder must be exported individually.


C.

Exporting a folder copies only the folder without any files.


D.

Exporting a folder will copy all subfolders without the system attribute.


Expert Solution
Questions # 14:

What happens when a duplicate hash value is imported into a KFF database?

Options:

A.

It will not be accepted.


B.

It will be marked as a duplicate.


C.

The database will be corrupted.


D.

The database will hide the duplicate.


Expert Solution
Questions # 15:

You view a registry file in Registry Viewer. You want to create a report, which includes items that you have marked "Add to Report." Which Registry Viewer option accomplishes this task?

Options:

A.

Common Areas


B.

Generate Report


C.

Define Summary Report


D.

Manage Summary Reports


Expert Solution
Questions # 16:

You examine evidence and flag several graphic images found in different folders. You now want to bookmark these items into a single bookmark. Which tab in FTK do you use to view only the flagged thumbnails?

Options:

A.

Explore tab


B.

Graphics tab


C.

Overview tab


D.

Bookmark tab


Expert Solution
Questions # 17:

When adding data to FTK, which statement about DriveFreeSpace is true?

Options:

A.

DriveFreeSpace is merged with deleted files.


B.

DriveFreeSpace is segmented into 10 megabyte items.


C.

DriveFreeSpace is truncated, based on the size of the case.dat file.


D.

DriveFreeSpace is classified with file slack items in the Overview tab.


Expert Solution
Questions # 18:

Click the Exhibit button.

Question # 18

You need to search for specific data that are located in a Microsoft Word document. You do not know the exact spelling of this datA. Using the Index Search Options as displayed in the exhibit, which changes do you make in the Broadening Options and Search Limiting Options containers?

Options:

A.

check the Fuzzy box;

check the File Name Pattern box;

type *.doc in the pattern container


B.

check the Stemming box;

check the File Name Pattern box;

type *.doc in the pattern container


C.

check the Synonym box;

check the File Name Pattern box;

type *.doc in the pattern container


D.

check the Stemming box;

check the File Name Pattern box;

type %.doc in the pattern container


Expert Solution
Viewing page 2 out of 2 pages
Viewing questions 11-20 out of questions