AccessData Certified Examiner (ACE)

In FTK, what does the 'Evidence Tree' panel display?

Hash values of all indexed files A hierarchical view of all added evidence sources and their file system contents Only deleted and unallocated files Email headers extracted from the image

Correct Answer:

A hierarchical view of all added evidence sources and their file system contents

Access more questions from this quiz

Continue to AccessData Certified Examiner (ACE) for more practice questions and the full quiz experience.

Access More Questions