AccessData ACE Certification test | Questions with 100% Correct Answers | Updated & Verified

FTK Imager can read a Norton Ghost Compressed Image file - False FTK Imager can image individual files - False FTK Imager can read a Norton Ghost Uncompressed File - True FTK Imager is a write blocking device/software - False. (It will not directly write to a suspect device but windows may) Using FTK Imager, if you convert and EO1 to Raw (or vis versa), the Hashes would match. - True Name 3 image file types that allow compression. - E01, S01, AD01 Why would FTK imager indicate drive numbers, 1,2,3, and 5? - 5 and above indicates an extended partition. 1-4 indicates Primary partitions. When exporting a file from Imager, the time and date stamps of the exported file will not match those of the file in the original image. - False. Imager will use the original times and dates for the file it exports.