ACE EXAM 2024 WITH 100% CORRECT ANSWERS

ACE EXAM 2024 WITH 100% CORRECT ANSWERS Password and Certificate (*.pfx, *.p12, *.pem) - correct answer FTK Imager supports the encryption of forensic image files. What two methods may be used for encryption? MD5 hash, SHA1 hash, and File Names (Including path) - correct answer When creating a File Hash List in Imager, what information is included in the resulting file? Properties Pane - correct answer Which Imager pane shows information specific to file systems such as HFS+, NTFS, and Ext2? Physical Drive, Logical Drive, Contents of a folder, and Image File - correct answer FTK Imager allows what type of evidence to be added? Navigate file systems in Windows Explorer (Ext2, HFS+, etc) normally not recognized, Run antivirus software against mounted images, Make "virtual writes" to the mounted image using a cache file, Run third party software against the mounted image, and Navigate the directory structure without making changes using the "Read-Only" mounting option. - correct answer Name three features of the Image Mounting function in Imager and in FTK. EnCase - *.E01, RAW(DD) - *.001, Advanced Forensic Format - *.AFF, AD Custom Content (Logical Image) - *.AD1, and SMART - *.S01 - correct answer What types of image file formats can be created by Imager? File extension of *.AD1, Logical files only - no file slack, Can include recursive subdirectories, and Can inclu