In FTK, when you view the Total File Items container (rather than the Actual Files container), why are there more items than files?
Correct Answer:A
You used FTK Imager to create several hash list files. You view the location where the files were exported. What is the file extension type for these files?
Correct Answer:D
You are converting one image file format to another using FTK Imager. Why are the hash values of the original image and the resulting new image the same?
Correct Answer:D
Which statement is true about using FTK Imager to simultaneously create multiple images of a single source?
Correct Answer:D
After creating a case, the Encrypted Files container lists EFS files. However, no decrypted
sub- items are present. All other necessary components for EFS decryption are present in the case. Which two files must be used to recover the EFS password for use in FTK? (Choose two.)
Correct Answer:AB
In FTK, which tab provides specific information on the evidence items, file items, file status and file category?
Correct Answer:C