Pre-Summer Special Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code = getmirror

Home
AccessData
AccessData Certification
A30-327
AccessData Certified Examiner Questions and Answers

Pass the AccessData Certification A30-327 Questions and answers with ExamsMirror

Practice at least 50% of the questions to maximize your chances of passing.

Exam A30-327 Premium Access

View all detail and faqs for the A30-327 exam

Go to Exam

835 Students Passed

87% Average Score

98% Same Questions

Viewing page 2 out of 2 pages

Viewing questions 11-20 out of questions

Questions # 11:

Which two options are available in the FTK Report Wizard? (Choose two.)

Options:

List by File Path

List File Properties

Include HTML File Listing

Include PRTK Output List

Answer

A, B

Questions # 12:

To obtain protected files on a live machine with FTK Imager, which evidence item should be added?

Options:

image file

currently booted drive

server object settings

profile access control list

Answer

Questions # 13:

Into which two categories can an imported hash set be assigned? (Choose two.)

Options:

alert

ignore

contraband

system files

Answer

A, B

Questions # 14:

You view a registry file in Registry Viewer. You want to create a report, which includes items that you have marked "Add to Report." Which Registry Viewer option accomplishes this task?

Options:

Common Areas

Generate Report

Define Summary Report

Manage Summary Reports

Answer

Questions # 15:

Using the FTK Report Wizard, which two options are available in the Bookmarks - A

window? (Choose two.)

Options:

Apply a filter to the list

Group all filenames at end of report

Yes, include all graphics in the case

No, do not include a bookmark section

Export full-size graphics and link them to the thumbnails

Answer

D, E

Questions # 16:

In FTK, when you view the Total File Items container (rather than the Actual Files container), why are there more items than files?

Options:

Total File Items includes files that are in archive files, while Actual Files does not.

Total File Items includes all unfiltered files while Actual Files includes only checked files.

Total File Items includes all KFF Ignorables while Actual Files includes only the KFF

Alerts.

Total File Items includes files that are in the Graphics and E-Mail tabs, while Actual Files

only includes files in the Graphics tab while excluding attachments in the E-mail tab.

Answer

Questions # 17:

Which statement is true about using FTK Imager to simultaneously create multiple images of a single source?

Options:

In the Image Creation Wizard, you should select the Add Additional Drives option.

You should use the Create Multiple Images option to create server image objects.

You should note the evidence item source signature and add it to the Image View pane.

In the Image Creation Wizard, you should add multiple destination jobs from the same

source prior To beginning image creation.

Answer

Questions # 18:

Click the Exhibit button.

Question # 18

You need to search for specific data that are located in a Microsoft Word document. You do not know the exact spelling of this datA. Using the Index Search Options as displayed in the exhibit, which changes do you make in the Broadening Options and Search Limiting Options containers?