Black Friday Sale - Limited Time 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: 65percent

Welcome To DumpsPedia

A30-327 Sample Questions Answers

Questions 4

Using the FTK Report Wizard, which two options are available in the Bookmarks - A

window? (Choose two.)

Options:

A.

Apply a filter to the list

B.

Group all filenames at end of report

C.

Yes, include all graphics in the case

D.

No, do not include a bookmark section

E.

Export full-size graphics and link them to the thumbnails

Buy Now
Questions 5

What are three image file formats that can be read by FTK Imager? (Choose three.)

Options:

A.

E01 files

B.

raw (dd) image files

C.

SafeBack version 2.2 image files

D.

SafeBack version 3.0 image files

E.

Symantec Ghost compressed image files

Buy Now
Questions 6

You currently store alternate hash libraries on a remote server. Where do you configure FTK to access these files rather than the default library, ADKFFLibrary.hdb?

Options:

A.

Preferences

B.

User Options

C.

Analysis Tools

D.

Import KFF Hashes

Buy Now
Questions 7

Which pattern does the following regular expression recover?

(\d{4}[\- ]){3}\d{4}

Options:

A.

000-000-0000

B.

ddd-4-3-dddd-4-3

C.

000-00000-000-ABC

D.

0000-0000-0000-0000

Buy Now
Questions 8

You are using FTK to process e-mail files. In which two areas can E-mail attachments be

located? (Choose two.)

Options:

A.

the E-mail tab

B.

the From E-mail container in the Overview tab

C.

the Evidence Items container in the Overview tab

D.

the E-mail Messages container in the Overview tab

Buy Now
Questions 9

In FTK, a user may alter the alert or ignore status of individual hash sets within the active

KFF. Which utility is used to accomplish this?

Options:

A.

KFF Alert Editor

B.

ADKFF Library Selector

C.

Hash Database File Selector

D.

Hash Database Recovery Engine

Buy Now
Questions 10

What is the purpose of the Golden Dictionary?

Options:

A.

maintains previously created level information

B.

maintains previously created profile information

C.

maintains a list of the 100 most likely passwords

D.

maintains previously recovered passwords

Buy Now
Questions 11

When adding data to FTK, which statement about DriveFreeSpace is true?

Options:

A.

DriveFreeSpace is merged with deleted files.

B.

DriveFreeSpace is segmented into 10 megabyte items.

C.

DriveFreeSpace is truncated, based on the size of the case.dat file.

D.

DriveFreeSpace is classified with file slack items in the Overview tab.

Buy Now
Questions 12

To obtain protected files on a live machine with FTK Imager, which evidence item should be added?

Options:

A.

image file

B.

currently booted drive

C.

server object settings

D.

profile access control list

Buy Now
Questions 13

You are converting one image file format to another using FTK Imager. Why are the hash

values of the original image and the resulting new image the same?

Options:

A.

because FTK Imager's progress bar tracks the conversion

B.

because FTK Imager verifies the amount of data converted

C.

because FTK Imager compares the elapsed time of conversion

D.

because FTK Imager hashes only the data during the conversion

Buy Now
Questions 14

Into which two categories can an imported hash set be assigned? (Choose two.)

Options:

A.

alert

B.

ignore

C.

contraband

D.

system files

Buy Now
Questions 15

In FTK, which search broadening option allows you to find grammatical variations of the word "kill" such as "killer," "killed," and "killing"?

Options:

A.

Phonic

B.

Synonym

C.

Stemming

D.

Fuzzy Logic

Buy Now
Questions 16

Which Registry Viewer function would allow you to automatically document multiple

unknown user names?

Options:

A.

Add to Report

B.

Export User List

C.

Add to Report with Children

D.

Summary Report with Wildcard

Buy Now
Questions 17

In which Overview tab container are HTML files classified?

Options:

A.

Archive container

B.

Java Code container

C.

Documents container

D.

Internet Files container

Buy Now
Questions 18

Click the Exhibit button.

What change do you make to the file filter shown in the exhibit in order to show only graphics with a logical size between 500 kilobytes and 10 megabytes?

Options:

A.

You change all file status items to a red circle.

B.

You change all file status items to a yellow triangle.

C.

You make no change. The filter is correct as shown.

D.

You change Graphics in the File Type column to a yellow triangle.

Buy Now
Exam Code: A30-327
Exam Name: AccessData Certified Examiner
Last Update: Nov 20, 2024
Questions: 60
$57.75  $164.99
$43.75  $124.99
$36.75  $104.99
buy now A30-327