Magnet MCFE Exam Questions And Answers Latest Update
Magnet MCFE Exam Questions And
Answers Latest Update
Workstations should have fast drives and high input/output operations. - ✔✔✔-True
Remove duplicates removes them from the same or multiple sources? - ✔✔✔-Same
Search speed increases as multi-tasking increases. - ✔✔✔-False
Does Axiom automatically hash files larger than 500 MB? - ✔✔✔-It does NOT
All images and videos are AUTOMATICALLY hashed. - ✔✔✔-True
You should always keep case files and evidence files separate. - ✔✔✔-True
Evidence sources available can be dependent on the Axiom license type. - ✔✔✔-
True
Full = __________________ image - ✔✔✔-Physical
"All Files & Folders" = __________________________ - ✔✔✔-Logical File System
"All Files & Folders" captures deleted data. - ✔✔✔-False
"Targeted" = ____________ image and _________________ image - ✔✔✔-Logical &
Triage
©®™ Page 1
, Magnet MCFE Exam Questions And Answers Latest Update
"Targeted" acquires areas most likely to contain evidence. - ✔✔✔-True
"Quick" search searches MOST COMMON areas - ✔✔✔-True
"Full" search searches ALL areas. - ✔✔✔-True
"Sector-Level" search does NOT read raw data - ✔✔✔-False
"Sector-Level" can't be used for chip-off - ✔✔✔-False
"Sector-Level" can be used for carving - ✔✔✔-True
Evidence Sources - File browser shows hidden files and folders. - ✔✔✔-False
Evidence Sources is using Windows Explorer and not Axiom. - ✔✔✔-True
Keywords are ____________ created by processing - ✔✔✔-Artifacts
Processing only artifacts is the fastest option - ✔✔✔-True
"All Content" is a _____________ for byte search. - ✔✔✔-Byte
Ignore Non-relevant includes Apple, Android, Windows - ✔✔✔-True
Ignore Non-relevant includes the NSRL - ✔✔✔-True
©®™ Page 2
Magnet MCFE Exam Questions And
Answers Latest Update
Workstations should have fast drives and high input/output operations. - ✔✔✔-True
Remove duplicates removes them from the same or multiple sources? - ✔✔✔-Same
Search speed increases as multi-tasking increases. - ✔✔✔-False
Does Axiom automatically hash files larger than 500 MB? - ✔✔✔-It does NOT
All images and videos are AUTOMATICALLY hashed. - ✔✔✔-True
You should always keep case files and evidence files separate. - ✔✔✔-True
Evidence sources available can be dependent on the Axiom license type. - ✔✔✔-
True
Full = __________________ image - ✔✔✔-Physical
"All Files & Folders" = __________________________ - ✔✔✔-Logical File System
"All Files & Folders" captures deleted data. - ✔✔✔-False
"Targeted" = ____________ image and _________________ image - ✔✔✔-Logical &
Triage
©®™ Page 1
, Magnet MCFE Exam Questions And Answers Latest Update
"Targeted" acquires areas most likely to contain evidence. - ✔✔✔-True
"Quick" search searches MOST COMMON areas - ✔✔✔-True
"Full" search searches ALL areas. - ✔✔✔-True
"Sector-Level" search does NOT read raw data - ✔✔✔-False
"Sector-Level" can't be used for chip-off - ✔✔✔-False
"Sector-Level" can be used for carving - ✔✔✔-True
Evidence Sources - File browser shows hidden files and folders. - ✔✔✔-False
Evidence Sources is using Windows Explorer and not Axiom. - ✔✔✔-True
Keywords are ____________ created by processing - ✔✔✔-Artifacts
Processing only artifacts is the fastest option - ✔✔✔-True
"All Content" is a _____________ for byte search. - ✔✔✔-Byte
Ignore Non-relevant includes Apple, Android, Windows - ✔✔✔-True
Ignore Non-relevant includes the NSRL - ✔✔✔-True
©®™ Page 2
