A30-327 Free Practice Test

Which data in the Registry can the Registry Viewer translate for the user? (Choose three.)

1. A. calculate MD5 hashes of individual keys
2. B. translate the MRUs in chronological order
3. C. present data stored in null terminated keys
4. D. present the date and time of each typed URL
5. E. View Protected Storage System Provider (PSSP) data

Correct Answer: BCE

Which statement is true about using FTK Imager to export a folder and its subfolders?

1. A. Exporting a folder will copy all its subfolders.
2. B. Each subfolder must be exported individually.
3. C. Exporting a folder copies only the folder without any files.
4. D. Exporting a folder will copy all subfolders without the system attribute.

Correct Answer: A

In FTK, when you view the Total File Items container (rather than the Actual Files container), why are there more items than files?

1. A. Total File Items includes files that are in archive files, while Actual Files does not.
2. B. Total File Items includes all unfiltered files while Actual Files includes only checked files.
3. C. Total File Items includes all KFF Ignorables while Actual Files includes only the KFF Alerts.
4. D. Total File Items includes files that are in the Graphics and E-Mail tabs, while Actual Files only includes files in the Graphics tab while excluding attachments in the E-mail tab.

Correct Answer: A

When using PRTK to attack encrypted files exported from a case, which statement is true?

1. A. PRTK will request the user access control list from FTK.
2. B. PRTK will generate temporary copies of decrypted files for printing.
3. C. FTK will stop all active jobs to allow PRTK to decrypt the exported files.
4. D. File hash values will change when they are saved in their decrypted format.
5. E. Additional interoperability between PRTK and NTAccess becomes available when files begin decrypting.

Correct Answer: D

What are two functions of the Summary Report in Registry Viewer? (Choose two.)
Solution:


Does this meet the goal?

1. A. Yes
2. B. No

Correct Answer: A