nerdexam
Access_Data

A30-327 · Question #20

In FTK, you navigate to the Graphics tab at the Case level and you do not see any graphics. What should you do to see all graphics in the case?

The correct answer is A. list all descendants. Selecting "List All Descendants" in FTK forces the file browser to recursively include items from all subfolders and containers beneath the current node - without this, the Case-level Graphics tab only displays graphics that are direct children of the case root, leaving nested…

Forensic Process and Best Practices

Question

In FTK, you navigate to the Graphics tab at the Case level and you do not see any graphics. What should you do to see all graphics in the case?

Options

  • Alist all descendants
  • Brun the graphic files filter
  • Ccheck all items in the current list
  • Dselect the Graphics container button

How the community answered

(40 responses)
  • A
    93% (37)
  • C
    5% (2)
  • D
    3% (1)

Explanation

Selecting "List All Descendants" in FTK forces the file browser to recursively include items from all subfolders and containers beneath the current node - without this, the Case-level Graphics tab only displays graphics that are direct children of the case root, leaving nested items invisible.

Why the distractors are wrong:

  • B (run the graphic files filter): A filter narrows an existing result set; it cannot surface items that aren't already listed in the current view.
  • C (check all items in the current list): Checking/selecting items changes what you act on, not what is displayed - it won't pull in items from subfolders.
  • D (select the Graphics container button): This navigates you to the Graphics tab, which is already where you are; it doesn't expand the scope of what's shown.

Memory tip: Think of FTK's case tree like a collapsed folder structure - "List All Descendants" is the equivalent of "expand all," ensuring every deeply nested graphic bubbles up into the current view. If you see nothing, you need to go deeper, and only option A does that.

Topics

#FTK Graphics tab#Case hierarchy#Descendants#Data visualization

Community Discussion

No community discussion yet for this question.

Full A30-327 Practice