AccessData
A30-327
AccessData Certified Examiner
https://killexams.com/pass4sure/exam-detail/A30-327
C. The hash value of the remaining encrypted file did not match.
D. The remaining encrypted file had previously been bookmarked.
E. An incorrect CRC value for the $EFS certificate was applied by the user.
Answer: B
QUESTION: 55
Which two Registry Viewer operations can be conducted from FTK? (Choose two.)
A. list SAM file account names in FTK
B. view all registry files from within FTK
C. createsubitems of individual keys for FTK
D. export a registry report to the FTK case report
Answer: B, D
QUESTION: 56
FTK Imager can be invoked from within which program?
A. FTK
B. DNA
C. PRTK
D. Registry Viewer
Answer: A
QUESTION: 57
Into which two categories can an imported hash set be assigned? (Choose two.)
A. alert
B. ignore
C. contraband
D. system files
Answer: A, B
19
QUESTION: 58
What happens when a duplicate hash value is imported into a KFF database?
A. It will not be accepted.
B. It will be marked as a duplicate.
C. The database will be corrupted.
D. The database will hide the duplicate.
Answer: A
QUESTION: 59
You currently store alternate hash libraries on a remote server. Where do you configure
FTK to access these files rather than the default library, ADKFFLibrary.hdb?
A. Preferences
B. User Options
C. Analysis Tools
D. Import KFF Hashes
Answer: A
QUESTION: 60
Which file should be selected to open an existing case in FTK?
A. ftk.exe
B. case.ini
C. case.dat
D. isobuster.dll
Answer: C
20
For More exams visit https://killexams.com/vendors-exam-list
Kill your exam at First Attempt....Guaranteed!