RELATIVITY CERTIFIED PROCESSING
SPECIALIST EXAM GUIDE QUESTIONS
WITH COMPLETE SOLUTIONS
Can you delete a custodian that is associated with a processing data source? -
ANSWER-No
Extraction of embedded images or objects is not supported for which file types? -
ANSWER-•Visio
•Project
•OpenOffice
(Note: REL currently Doesn't support the extraction of embedded images or objects
from Visio, Project, or OpenOffice files. In addition, REL never extracts any embedded
objects or images that were added to any files as links.) p4
Does Relativity extract embedded objects or images that were added to files as links? -
ANSWER-No
Can Relativity distinguish between text and line art in documents? - ANSWER-Yes.
Processing will only OCR the line art. Relativity doesn't skip OCR if a page has
electronic text
(.1.6 Native text extraction and OCR: REL Processing distinguishes btw text & line art in
the docs you process. For these docs, processing will only OCR the line art. This means
that REL doesn't skip OCR if a page has electronic text. REL)
p5
On which file formats does Relativity perform both Native Text Extraction and OCR? -
ANSWER-•Images (TIFF/JPEG/GIF/BMP/PNG etc.)
•Vectors (SVG, CAD files, Metafiles [WMF, EMF], Postscript, Encapsulated postscript)
•PDF, Visio, Publisher, MS Project, Hancom & JungUm files
p5
Notable unsupported file types - ANSWER-•DOS, Windows, and Mac word processors
•Disk Images: Symantec and FTK
•Spreadsheets: Lotus 1-2-3 and others
•Self-extracting RAR
•PEM certificates
•Apple iWorks suite (Pages, Numbers, Keynote)
•iCloud backup files
•Microsoft Access
,•Raw partition files (ISO, NTFS, HFS)
p6
Can Relativity process multipart zip files? - ANSWER-No
4.1.4 Multi-part forensic file considerations
When processing a multi-part forensic image, make sure that the Source location points
to the root folder that must contain all files that make up the image. If you select only the
first file of the image (E01, L01, EX01, LX01), inventory & discovery will fail with an
unrecoverable error.
This is due to the fact that inventory looks at files where they reside in the processing
source folder & does not copy them to the repository. If only the first file is selected,
during discovery that file & only that file will be copied to the repository & the workers
will attempt to extract from it & fails since the rest of the archive is not available. When
processing E01 files, the following NTFS file system files are skipped: n Unallocated
space files, n Index $I30 files, n $TXF_DATE files
How many levels down does Relativity Inventory drill? - ANSWER-Inventory only
extracts data from first-level docs. For example, you have a .ZIP within a .ZIP that
contains an email with an attached Word doc, inventory only extracts up to the email.
How does Relativity Processing handle NSF files? - ANSWER-Relativity Processing
extracts the contents of NSF files and puts them into individual MSG files. This is
because NSF doesn't have its own individual document entry file format. All of the
original Lotus Notes metadata is embedded in the MSG.
What NSF items can Relativity process? - ANSWER-•Contacts
•Distribution lists
•Calendar items
•Emails and non-emails
4.3.1 Lotus Notes considerations: Note the following about how Relativity Processing
handles NSF files: ****
-> REL Processing doesn't perform intermediate conversion on NSF files, meaning that
we Don't convert them to PST or DXL before discovering them. This ensures that we
don't miss any doc metadata during processing.
-> REL Processing preserves the original formatting & atmts of the NSF file. In addition,
forms are not applied, since they are designed to hide info.
-> REL Processing extracts the contents of NSF files & puts them into individual MSG
files using the Lotus Notes C/C++ API directly. This is because NSF Doesn't have its
own individual doc entry file format. All of the original Lotus Notes metadata is
embedded in the MSG, meaning if you look at the doc metadata in an NSF within Lotus,
all of the metadata listed is embedded in the MSG. In addition, the or
,RTF/HTML/Plaintext doc body is written to the MSG. REL handles the conversion from
NSF to MSG files itself, & any errors regarding metadata or the inability to translate
content are logged to the processing Errors tab. REL can process the following NSF
items as MSGs: Contacts | Distribution lists | Calendar| items | Emails & non-emails
p7
How are ICS/VCF files deduplicated? - ANSWER-ICS/VCF files are deduplicated not as
emails but as loose files based on the SHA256 hash.
4.3.3 ICS/VCF file considerations: ICS/VCF files are deduplicated not as emails, but as
loose files based on the SHA256 hash. Since the system now considers these loose
files, REL is no longer capturing email-specific metadata that it used to get as a result of
ICS/VCF files going through system's email handler.
p7
What is the ICS file format? - ANSWER-An ICS file is a calendar file saved in a
universal calendar format used by several email and calendar programs, including
Microsoft Outlook, Google Calendar, and Apple Calendar
What is the VCF file format? - ANSWER-A VCF file is a standard file format for storing
contact information for a person or business. It typically includes a name, address,
phone number, email address, and other contact information
On Processing Profiles, what is the max number of characters the numbering prefix can
have? - ANSWER-75
Default document numbering prefix - the prefix applied to each file in a processing set
once it is published to a WS. The default value for this field is REL.
o When applied to docs, this appears as the prefix, followed by the # of digits you
specify. Ex, <Prefix>xxxxxxxxxx.
o If you use a different prefix for the Custodian field on the processing data source(s)
that you add to your processing set, the custodian's prefix takes precedence over the
profile's.
oThe character limit for this prefix is 75. ex REL
p14
On Processing Profiles, what is the default Number of Digits (padded with zeros) -
ANSWER-10
On Processing Profiles, what are the different options for Delimeter types? - ANSWER-
•Hyphen: -
•Period: .
•Underscore: _
, Where can the Password Bank tab be found? - ANSWER-Under the Imaging and
Processing tabs
T/F: Once a password from the Password Bank is synced with a Processing job, the
entry is stored on the Engine even if it is deleted from the Password Bank - ANSWER-
True
What are the different types of passwords that can be added to the Password Bank? -
ANSWER-Passwords(1)
Lotus Notes(2)
Email encryption certificate(3)
AD1 Encryption Certificate(4)
T/F: Relativity supports encrypted EnCase image files - ANSWER-False
T/F: Slipsheets are automatically created for password protected documents -
ANSWER-False
(For imaging & processing jobs, a slipsheet is not created automatically for docs that
are pw-protected. However, you can create an image outside of REL & use the pw-
protected doc's control # as the image key to then load the image into REL through the
RDC and have it display as the image for that encrypted doc.)
p9
What type of file extension must you upload to the Password Bank for Lotus Notes
type? - ANSWER-User.ID
T/F: For Lotus Notes, passwords associated with a Custodian have a higher priority -
ANSWER-True
What Public Key Bit size does Relativity support for User.ID files? - ANSWER-630
What file type must you upload if you select Email Encryption Certificate as the Type for
the Password Bank? - ANSWER-PFX or P12
T/F: Unicode passwords for Zip files are supported - ANSWER-False
T/F: Relativity automatically bypasses passwords for PSTs and OSTs during discovery -
ANSWER-True
Are passwords required for PST and OST files to be discovered? - ANSWER-No
T/F: You can view password protected files in the viewer if you have supplied a valid
password to the Password Bank for the purposes of Processing - ANSWER-True
SPECIALIST EXAM GUIDE QUESTIONS
WITH COMPLETE SOLUTIONS
Can you delete a custodian that is associated with a processing data source? -
ANSWER-No
Extraction of embedded images or objects is not supported for which file types? -
ANSWER-•Visio
•Project
•OpenOffice
(Note: REL currently Doesn't support the extraction of embedded images or objects
from Visio, Project, or OpenOffice files. In addition, REL never extracts any embedded
objects or images that were added to any files as links.) p4
Does Relativity extract embedded objects or images that were added to files as links? -
ANSWER-No
Can Relativity distinguish between text and line art in documents? - ANSWER-Yes.
Processing will only OCR the line art. Relativity doesn't skip OCR if a page has
electronic text
(.1.6 Native text extraction and OCR: REL Processing distinguishes btw text & line art in
the docs you process. For these docs, processing will only OCR the line art. This means
that REL doesn't skip OCR if a page has electronic text. REL)
p5
On which file formats does Relativity perform both Native Text Extraction and OCR? -
ANSWER-•Images (TIFF/JPEG/GIF/BMP/PNG etc.)
•Vectors (SVG, CAD files, Metafiles [WMF, EMF], Postscript, Encapsulated postscript)
•PDF, Visio, Publisher, MS Project, Hancom & JungUm files
p5
Notable unsupported file types - ANSWER-•DOS, Windows, and Mac word processors
•Disk Images: Symantec and FTK
•Spreadsheets: Lotus 1-2-3 and others
•Self-extracting RAR
•PEM certificates
•Apple iWorks suite (Pages, Numbers, Keynote)
•iCloud backup files
•Microsoft Access
,•Raw partition files (ISO, NTFS, HFS)
p6
Can Relativity process multipart zip files? - ANSWER-No
4.1.4 Multi-part forensic file considerations
When processing a multi-part forensic image, make sure that the Source location points
to the root folder that must contain all files that make up the image. If you select only the
first file of the image (E01, L01, EX01, LX01), inventory & discovery will fail with an
unrecoverable error.
This is due to the fact that inventory looks at files where they reside in the processing
source folder & does not copy them to the repository. If only the first file is selected,
during discovery that file & only that file will be copied to the repository & the workers
will attempt to extract from it & fails since the rest of the archive is not available. When
processing E01 files, the following NTFS file system files are skipped: n Unallocated
space files, n Index $I30 files, n $TXF_DATE files
How many levels down does Relativity Inventory drill? - ANSWER-Inventory only
extracts data from first-level docs. For example, you have a .ZIP within a .ZIP that
contains an email with an attached Word doc, inventory only extracts up to the email.
How does Relativity Processing handle NSF files? - ANSWER-Relativity Processing
extracts the contents of NSF files and puts them into individual MSG files. This is
because NSF doesn't have its own individual document entry file format. All of the
original Lotus Notes metadata is embedded in the MSG.
What NSF items can Relativity process? - ANSWER-•Contacts
•Distribution lists
•Calendar items
•Emails and non-emails
4.3.1 Lotus Notes considerations: Note the following about how Relativity Processing
handles NSF files: ****
-> REL Processing doesn't perform intermediate conversion on NSF files, meaning that
we Don't convert them to PST or DXL before discovering them. This ensures that we
don't miss any doc metadata during processing.
-> REL Processing preserves the original formatting & atmts of the NSF file. In addition,
forms are not applied, since they are designed to hide info.
-> REL Processing extracts the contents of NSF files & puts them into individual MSG
files using the Lotus Notes C/C++ API directly. This is because NSF Doesn't have its
own individual doc entry file format. All of the original Lotus Notes metadata is
embedded in the MSG, meaning if you look at the doc metadata in an NSF within Lotus,
all of the metadata listed is embedded in the MSG. In addition, the or
,RTF/HTML/Plaintext doc body is written to the MSG. REL handles the conversion from
NSF to MSG files itself, & any errors regarding metadata or the inability to translate
content are logged to the processing Errors tab. REL can process the following NSF
items as MSGs: Contacts | Distribution lists | Calendar| items | Emails & non-emails
p7
How are ICS/VCF files deduplicated? - ANSWER-ICS/VCF files are deduplicated not as
emails but as loose files based on the SHA256 hash.
4.3.3 ICS/VCF file considerations: ICS/VCF files are deduplicated not as emails, but as
loose files based on the SHA256 hash. Since the system now considers these loose
files, REL is no longer capturing email-specific metadata that it used to get as a result of
ICS/VCF files going through system's email handler.
p7
What is the ICS file format? - ANSWER-An ICS file is a calendar file saved in a
universal calendar format used by several email and calendar programs, including
Microsoft Outlook, Google Calendar, and Apple Calendar
What is the VCF file format? - ANSWER-A VCF file is a standard file format for storing
contact information for a person or business. It typically includes a name, address,
phone number, email address, and other contact information
On Processing Profiles, what is the max number of characters the numbering prefix can
have? - ANSWER-75
Default document numbering prefix - the prefix applied to each file in a processing set
once it is published to a WS. The default value for this field is REL.
o When applied to docs, this appears as the prefix, followed by the # of digits you
specify. Ex, <Prefix>xxxxxxxxxx.
o If you use a different prefix for the Custodian field on the processing data source(s)
that you add to your processing set, the custodian's prefix takes precedence over the
profile's.
oThe character limit for this prefix is 75. ex REL
p14
On Processing Profiles, what is the default Number of Digits (padded with zeros) -
ANSWER-10
On Processing Profiles, what are the different options for Delimeter types? - ANSWER-
•Hyphen: -
•Period: .
•Underscore: _
, Where can the Password Bank tab be found? - ANSWER-Under the Imaging and
Processing tabs
T/F: Once a password from the Password Bank is synced with a Processing job, the
entry is stored on the Engine even if it is deleted from the Password Bank - ANSWER-
True
What are the different types of passwords that can be added to the Password Bank? -
ANSWER-Passwords(1)
Lotus Notes(2)
Email encryption certificate(3)
AD1 Encryption Certificate(4)
T/F: Relativity supports encrypted EnCase image files - ANSWER-False
T/F: Slipsheets are automatically created for password protected documents -
ANSWER-False
(For imaging & processing jobs, a slipsheet is not created automatically for docs that
are pw-protected. However, you can create an image outside of REL & use the pw-
protected doc's control # as the image key to then load the image into REL through the
RDC and have it display as the image for that encrypted doc.)
p9
What type of file extension must you upload to the Password Bank for Lotus Notes
type? - ANSWER-User.ID
T/F: For Lotus Notes, passwords associated with a Custodian have a higher priority -
ANSWER-True
What Public Key Bit size does Relativity support for User.ID files? - ANSWER-630
What file type must you upload if you select Email Encryption Certificate as the Type for
the Password Bank? - ANSWER-PFX or P12
T/F: Unicode passwords for Zip files are supported - ANSWER-False
T/F: Relativity automatically bypasses passwords for PSTs and OSTs during discovery -
ANSWER-True
Are passwords required for PST and OST files to be discovered? - ANSWER-No
T/F: You can view password protected files in the viewer if you have supplied a valid
password to the Password Bank for the purposes of Processing - ANSWER-True
