Which three items are contained in an Image Summary File using FTK Imager? (Choose
three.)
What is the most effective method to facilitate successful password recovery?
When using FTK Imager to preview a physical drive, which number is assigned to the first logical volume of an extended partition?
Click the Exhibit button.
When decrypting EFS files in a case, you receive the result shown in the exhibit. What is the most plausible explanation for this result?
You have processed a case in FTK using all the default options. The investigator supplies you with a list of 400 names in an electronic format. What is the quickest way to search
unallocated space for all of these names?
What are two functions of the Summary Report in Registry Viewer? (Choose two.)
Click the Exhibit button.
You need to search for specific data that are located in a Microsoft Word document. You do not know the exact spelling of this datA. Using the Index Search Options as displayed in the exhibit, which changes do you make in the Broadening Options and Search Limiting Options containers?
In FTK, which two formats can be used to export an E-mail message? (Choose two.)
After creating a case, the Encrypted Files container lists EFS files. However, no decrypted
sub- items are present. All other necessary components for EFS decryption are present in the case. Which two files must be used to recover the EFS password for use in FTK? (Choose two.)