Summer Special 60% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: bestdeal

AccessData A30-327 Exam Made Easy: Step-by-Step Preparation Guide

Questions 1

You successfully export and create a file hash list while using FTK Imager. Which three

pieces of information are included in this file? (Choose three.)

Options:

A.

MD5

B.

SHA1

C.

filename

D.

record date

E.

date modified

Buy Now
Questions 2

While analyzing unallocated space, you locate what appears to be a 64-bit Windows date and

time. Which FTK Imager feature allows you display the information as a date and time?

Options:

A.

INFO2 Filter

B.

Base Converter

C.

Metadata Parser

D.

Hex Value Interpreter

Buy Now
Questions 3

You examine evidence and flag several graphic images found in different folders. You now want to bookmark these items into a single bookmark. Which tab in FTK do you use to view only the flagged thumbnails?

Options:

A.

Explore tab

B.

Graphics tab

C.

Overview tab

D.

Bookmark tab

Buy Now
Questions 4

In FTK, which tab provides specific information on the evidence items, file items, file status and file category?

Options:

A.

E-mail tab

B.

Explore tab

C.

Overview tab

D.

Graphics tab

Buy Now
Questions 5

Into which two categories can an imported hash set be assigned? (Choose two.)

Options:

A.

alert

B.

ignore

C.

contraband

D.

system files

Buy Now
Questions 6

Which two image formats contain an embedded hash value for file verification? (Choose two.)

Options:

A.

E01

B.

S01

C.

ISO

D.

CUE

E.

001 (dd)

Buy Now
Questions 7

When using FTK Imager to preview a physical drive, which number is assigned to the first logical volume of an extended partition?

Options:

A.

2

B.

3

C.

4

D.

5

Buy Now
Questions 8

In FTK, you navigate to the Graphics tab at the Case level and you do not see any graphics. What should you do to see all graphics in the case?

Options:

A.

list all descendants

B.

run the graphic files filter

C.

check all items in the current list

D.

select the Graphics container button

Buy Now
Questions 9

Which data in the Registry can the Registry Viewer translate for the user? (Choose three.)

Options:

A.

calculate MD5 hashes of individual keys

B.

translate the MRUs in chronological order

C.

present data stored in null terminated keys

D.

present the date and time of each typed URL

E.

View Protected Storage System Provider (PSSP) data

Buy Now
Questions 10

When adding data to FTK, which statement about DriveFreeSpace is true?

Options:

A.

DriveFreeSpace is merged with deleted files.

B.

DriveFreeSpace is segmented into 10 megabyte items.

C.

DriveFreeSpace is truncated, based on the size of the case.dat file.

D.

DriveFreeSpace is classified with file slack items in the Overview tab.

Buy Now
Exam Code: A30-327
Exam Name: AccessData Certified Examiner
Last Update: Jun 25, 2024
Questions: 60

PDF + Testing Engine

$159.99
$64

Testing Engine

$119.99
$48

PDF (Q&A)

$99.99
$40