AccessData A30-327 Exam - TKcerts

Free A30-327 Sample Questions:

1. Which three items are displayed in FTK Imager for an individual file in the Properties window? (Choose three.)
A.flags
B.filename
C.hash set
D.timestamps
E.item number
ANSWER: ABD

2. In FTK, which search broadening option allows you to find grammatical variations of the word "kill" such as "killer," "killed," and "killing"?
A.Phonic
B.Synonym
C.Stemming
D.Fuzzy Logic
ANSWER: C

3. When using FTK Imager to preview a physical drive, which number is assigned to the first logical volume of an extended partition?
A.2
B.3
C.4
D.5
ANSWER: D

4. When previewing a physical drive on a local machine with FTK Imager, which statement is true?
A.FTK Imager can block calls to interrupt 13h and prevent writes to suspect media.
B.FTK Imager can operate from a USB drive, thus preventing writes to suspect media.
C.FTK Imager can operate via a DOS boot disk, thus preventing writes to suspect media.
D.FTK Imager should always be used in conjunction with a hardware write protect device to prevent writes to suspect media.
ANSWER: D

5. Click the Exhibit button.

You need to search for specific data that are located in a Microsoft Word document. You do not know the exact spelling of this data.  Using the Index Search Options as displayed in the exhibit, which changes do you make in the Broadening Options and Search Limiting Options containers?
A.check the Fuzzy box;
  check the File Name Pattern box;
  type *.doc in the pattern container
B.check the Stemming box;
  check the File Name Pattern box;
  type *.doc in the pattern container
C.check the Synonym box;
  check the File Name Pattern box;
  type *.doc in the pattern container
D.check the Stemming box;
  check the File Name Pattern box;
  type %.doc in the pattern container
Answer: A