A30-327 Imager Practice Questions

You successfully export and create a file hash list while using FTK Imager. Which three pieces of information are included in this file? (Choose three.)

Select 3 answers.

• AA. MD5
• BB. SHA1
• CC. filename
• DD. record date
• EE. date modified

Which statement is true about using FTK Imager to export a folder and its subfolders?

• AA. Exporting a folder will copy all its subfolders.
• BB. Each subfolder must be exported individually.
• CC. Exporting a folder copies only the folder without any files.
• DD. Exporting a folder will copy all subfolders without the system attribute.

Which three items are displayed in FTK Imager for an individual file in the Properties window? (Choose three.)

Select 3 answers.

• AA. flags
• BB. filename
• CC. hash set
• DD. timestamps
• EE. item number

FTK Imager allows a user to convert a Raw (dd) image into which two formats? (Choose two.)

Select 2 answers.

• AA. E01
• BB. Ghost
• CC. SMART
• DD. SafeBack

When previewing a physical drive on a local machine with FTK Imager, which statement is true?

• AA. FTK Imager can block calls to interrupt 13h and prevent writes to suspect media.
• BB. FTK Imager can operate from a USB drive, thus preventing writes to suspect media.
• CC. FTK Imager can operate via a DOS boot disk, thus preventing writes to suspect media.
• DD. FTK Imager should always be used in conjunction with a hardware write protect device to prevent writes to suspect media.