Black Friday Special Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: cramtick70

A30-327 AccessData Certified Examiner Questions and Answers

Questions 4

Which two options are available in the FTK Report Wizard? (Choose two.)

Options:

A.

List by File Path

B.

List File Properties

C.

Include HTML File Listing

D.

Include PRTK Output List

Buy Now
Questions 5

In FTK, you navigate to the Graphics tab at the Case level and you do not see any graphics. What should you do to see all graphics in the case?

Options:

A.

list all descendants

B.

run the graphic files filter

C.

check all items in the current list

D.

select the Graphics container button

Buy Now
Questions 6

Which two statements are true? (Choose two.)

Options:

A.

PRTK can recover Windows logon passwords.

B.

PRTK must run in conjunction with DNA workers to decrypt EFS files.

C.

PRTK and FTK must be installed on the same machine to decrypt EFS files.

D.

EFS files must be exported from a case and provided to PRTK for decryption.

Buy Now
Questions 7

You used FTK Imager to create several hash list files. You view the location where the files

were exported. What is the file extension type for these files?

Options:

A.

.txt = ASCII Text File

B.

.dif = Data Interchange Format

C.

.prn = Formatted Text Delimited

D.

.csv = Comma Separated Values

Buy Now
Questions 8

What are two functions of the Summary Report in Registry Viewer? (Choose two.)

Options:

A.

adds individual key values

B.

is a template for other registry files

C.

displays investigator keyword search results

D.

permits searching of registry values based on key headers

Buy Now
Questions 9

You are attempting to access data from the Protected Storage System Provider (PSSP) area of a registry. How do you accomplish this using PRTK?

Options:

A.

You drop the SAM file onto the PRTK interface.

B.

You drop the NTUSER.dat file onto the PRTK interface.

C.

You use the PSSP Attack Marshal from Registry Viewer.

D.

This area can not be accessed with PRTK as it is a registry file.

Buy Now
Exam Code: A30-327
Exam Name: AccessData Certified Examiner
Last Update: Nov 24, 2024
Questions: 60
A30-327 pdf

A30-327 PDF

$25.5  $84.99
A30-327 Engine

A30-327 Testing Engine

$30  $99.99
A30-327 PDF + Engine

A30-327 PDF + Testing Engine

$40.5  $134.99