Labour Day Special - Limited Time 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: top65certs

AccessData A30-327 Dumps

Page: 1 / 2
Total 60 questions

AccessData Certified Examiner Questions and Answers

Question 1

Which two Registry Viewer operations can be conducted from FTK? (Choose two.)

Options:

A.

list SAM file account names in FTK

B.

view all registry files from within FTK

C.

create subitems of individual keys for FTK

D.

export a registry report to the FTK case report

Question 2

In Registry Viewer, which steps initiate the Hex Interpreter?

Options:

A.

highlight the data and select the Hex Value Interpreter tab

B.

highlight the data, right-click on the highlighted data and select the Show Hex Interpreter

Window

C.

select the Hex Value Interpreter tab, highlight the data, right-click on the data to initiate the

Hex Interpreter

D.

right-click on the data area and select the Show Hex Interpreter Window and highlight the

data you want to interpret

Question 3

You view a registry file in Registry Viewer. You want to create a report, which includes items that you have marked "Add to Report." Which Registry Viewer option accomplishes this task?

Options:

A.

Common Areas

B.

Generate Report

C.

Define Summary Report

D.

Manage Summary Reports

Question 4

In FTK, which two formats can be used to export an E-mail message? (Choose two.)

Options:

A.

raw format

B.

XML format

C.

PDF format

D.

HTML format

E.

binary format

Question 5

What are three image file formats that can be read by FTK Imager? (Choose three.)

Options:

A.

E01 files

B.

raw (dd) image files

C.

SafeBack version 2.2 image files

D.

SafeBack version 3.0 image files

E.

Symantec Ghost compressed image files

Question 6

In FTK, a user may alter the alert or ignore status of individual hash sets within the active

KFF. Which utility is used to accomplish this?

Options:

A.

KFF Alert Editor

B.

ADKFF Library Selector

C.

Hash Database File Selector

D.

Hash Database Recovery Engine

Question 7

While analyzing unallocated space, you locate what appears to be a 64-bit Windows date and

time. Which FTK Imager feature allows you display the information as a date and time?

Options:

A.

INFO2 Filter

B.

Base Converter

C.

Metadata Parser

D.

Hex Value Interpreter

Question 8

What is the purpose of the Golden Dictionary?

Options:

A.

maintains previously created level information

B.

maintains previously created profile information

C.

maintains a list of the 100 most likely passwords

D.

maintains previously recovered passwords

Question 9

When using FTK Imager to preview a physical drive, which number is assigned to the first logical volume of an extended partition?

Options:

A.

2

B.

3

C.

4

D.

5

Page: 1 / 2
Total 60 questions