New Year Special Sale Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: scxmas70

A30-327 Exam Dumps - AccessData Certified Examiner

Go to page:
Question # 4

In FTK, when you view the Total File Items container (rather than the Actual Files container), why are there more items than files?

A.

Total File Items includes files that are in archive files, while Actual Files does not.

B.

Total File Items includes all unfiltered files while Actual Files includes only checked files.

C.

Total File Items includes all KFF Ignorables while Actual Files includes only the KFF

Alerts.

D.

Total File Items includes files that are in the Graphics and E-Mail tabs, while Actual Files

only includes files in the Graphics tab while excluding attachments in the E-mail tab.

Full Access
Question # 5

When using Registry Viewer to view a key with 20 values, what option can be used to display only 5 of the 20 values in a report?

A.

Report

B.

Special Reports

C.

Summary Report

D.

Add to Report With Children

Full Access
Question # 6

Which pattern does the following regular expression recover?

(\d{4}[\- ]){3}\d{4}

A.

000-000-0000

B.

ddd-4-3-dddd-4-3

C.

000-00000-000-ABC

D.

0000-0000-0000-0000

Full Access
Question # 7

Which two options are available in the FTK Report Wizard? (Choose two.)

A.

List by File Path

B.

List File Properties

C.

Include HTML File Listing

D.

Include PRTK Output List

Full Access
Question # 8

You have processed a case in FTK using all the default options. The investigator supplies you with a list of 400 names in an electronic format. What is the quickest way to search

unallocated space for all of these names?

A.

build a dtSearch string with all 400 names

B.

create a Regular Expression with all the names

C.

make an imported text file of the names in Live Search

D.

use an imported text file containing the names in Indexed Search

Full Access
Go to page: