Magnet MCFE Exam With Complete Solutions 100% Correct
Workstations Drives should be fast. High input/output operations ANSWER True
Remove duplicates removes them from the same or multiple sources? ANSWER Same
Search speed increases as multi-tasking increases. ANSWER False
Does Axiom automatically hash files over 500 MB? ANSWER It does NOT
All images and videos are automatically hashed. ANSWER True
Always separate your case file and Evidence file. ANSWER True
Evidence sources available can be dependent on the Axiom license type. - ANSWER
True
Full = __________________ image - ANSWER Physical
"All Files & Folders" = __________________________ - ANSWER Logical File System
"All Files & Folders" captures deleted data. - ANSWER False
"Targeted" = ____________ image and _________________ image - ANSWER Logical &
Triage
"Targeted" acquires areas most likely to contain evidence. - ANSWER True
, "Quick" search searches MOST COMMON areas - ANSWER True
"Full" search searches ALL areas. - ANSWER True
"Sector-Level" search does NOT read raw data - ANSWER False
"Sector-Level" can't be used for chip-off - ANSWER False
"Sector-Level" can be used for carving - ANSWER True
Evidence Sources - File browser shows hidden files and folders. - ANSWER False
Evidence Sources is using Windows Explorer and not Axiom. - ANSWER True
Keywords are ____________ created by processing - ANSWER Artifacts
Processing only artifacts is the fastest option - ANSWER True
"All Content" is a _____________ for byte search. - ANSWER Byte
Ignore Non-relevant includes Apple, Android, Windows - ANSWER True
Ignore Non-relevant includes the NSRL - ANSWER True
"Catagorize Chat" does not use Magnet AI - ANSWER False
Workstations Drives should be fast. High input/output operations ANSWER True
Remove duplicates removes them from the same or multiple sources? ANSWER Same
Search speed increases as multi-tasking increases. ANSWER False
Does Axiom automatically hash files over 500 MB? ANSWER It does NOT
All images and videos are automatically hashed. ANSWER True
Always separate your case file and Evidence file. ANSWER True
Evidence sources available can be dependent on the Axiom license type. - ANSWER
True
Full = __________________ image - ANSWER Physical
"All Files & Folders" = __________________________ - ANSWER Logical File System
"All Files & Folders" captures deleted data. - ANSWER False
"Targeted" = ____________ image and _________________ image - ANSWER Logical &
Triage
"Targeted" acquires areas most likely to contain evidence. - ANSWER True
, "Quick" search searches MOST COMMON areas - ANSWER True
"Full" search searches ALL areas. - ANSWER True
"Sector-Level" search does NOT read raw data - ANSWER False
"Sector-Level" can't be used for chip-off - ANSWER False
"Sector-Level" can be used for carving - ANSWER True
Evidence Sources - File browser shows hidden files and folders. - ANSWER False
Evidence Sources is using Windows Explorer and not Axiom. - ANSWER True
Keywords are ____________ created by processing - ANSWER Artifacts
Processing only artifacts is the fastest option - ANSWER True
"All Content" is a _____________ for byte search. - ANSWER Byte
Ignore Non-relevant includes Apple, Android, Windows - ANSWER True
Ignore Non-relevant includes the NSRL - ANSWER True
"Catagorize Chat" does not use Magnet AI - ANSWER False
