Weekend Sale Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: buysanta

Exact2Pass Menu

Question # 4

What happens when a duplicate hash value is imported into a KFF database?

A.

It will not be accepted.

B.

It will be marked as a duplicate.

C.

The database will be corrupted.

D.

The database will hide the duplicate.

Full Access
Question # 5

In FTK, which two formats can be used to export an E-mail message? (Choose two.)

A.

raw format

B.

XML format

C.

PDF format

D.

HTML format

E.

binary format

Full Access
Question # 6

In FTK, when you view the Total File Items container (rather than the Actual Files container), why are there more items than files?

A.

Total File Items includes files that are in archive files, while Actual Files does not.

B.

Total File Items includes all unfiltered files while Actual Files includes only checked files.

C.

Total File Items includes all KFF Ignorables while Actual Files includes only the KFF

Alerts.

D.

Total File Items includes files that are in the Graphics and E-Mail tabs, while Actual Files

only includes files in the Graphics tab while excluding attachments in the E-mail tab.

Full Access
Question # 7

In FTK, which search broadening option allows you to find grammatical variations of the word "kill" such as "killer," "killed," and "killing"?

A.

Phonic

B.

Synonym

C.

Stemming

D.

Fuzzy Logic

Full Access
Question # 8

Which data in the Registry can the Registry Viewer translate for the user? (Choose three.)

A.

calculate MD5 hashes of individual keys

B.

translate the MRUs in chronological order

C.

present data stored in null terminated keys

D.

present the date and time of each typed URL

E.

View Protected Storage System Provider (PSSP) data

Full Access
Question # 9

After creating a case, the Encrypted Files container lists EFS files. However, no decrypted

sub- items are present. All other necessary components for EFS decryption are present in the case. Which two files must be used to recover the EFS password for use in FTK? (Choose two.)

A.

SAM

B.

system

C.

SECURITY

D.

Master Key

E.

FEK Certificate

Full Access