Multiple Choice
The AccessData program has a hashing database, ________________, which is available only with FTK, and can be used to filter known program files from view and contains the hash values of known illegal files.
A) DeepScan Filter
B) Unknown File Filter (UFF)
C) Known File Filter (KFF)
D) FTK Hash Imager
Correct Answer:
Verified
Correct Answer:
Verified
Q16: Illustrate how an investigator would detect whether
Q17: Typically, anti-virus tools run hashes on potential
Q18: What format below is used for VMware
Q19: Match the following terms with the correct
Q20: Which option below is not a disk
Q22: Match the following terms with the correct
Q23: Many commercial encryption programs use a technology
Q24: Match the following terms with the correct
Q25: Explain what a digital watermark is and
Q26: Select the tool below that does not