In FTK, which two formats can be used to export an E-mail message? (Choose two.)

The correct answer is A. raw format D. HTML format. FTK (AccessData Forensic Toolkit) supports exporting email messages in raw format (.eml - the original RFC 2822 message as stored on disk) and HTML format (a rendered, human-readable version suitable for viewing in a browser or including in reports). These two formats cover…

Artifact Analysis (e.g., Internet history, email, registry)

Question

In FTK, which two formats can be used to export an E-mail message? (Choose two.)

Options

Araw format
BXML format
CPDF format
DHTML format
Ebinary format

How the community answered

(25 responses)

A
88% (22)
C
4% (1)
E
8% (2)

Explanation

FTK (AccessData Forensic Toolkit) supports exporting email messages in raw format (.eml - the original RFC 2822 message as stored on disk) and HTML format (a rendered, human-readable version suitable for viewing in a browser or including in reports). These two formats cover both forensic integrity (raw) and readability (HTML), making them the practical choices built into FTK's export workflow.

Distractors: XML (B) is not a native FTK email export option - XML is used for metadata/report exports, not message bodies. PDF (C) is not a direct FTK email export format; PDF output comes from FTK's report generation feature, not individual message export. Binary (E) is a vague term - raw format is already the underlying binary/text representation, so "binary" as a separate option doesn't exist in FTK's menu.

Memory tip: Think "Raw HTML" - Raw preserves the evidence, HTML presents it. FTK gives you the two ends of the spectrum: the untouched original and the viewable copy.

Topics

#FTK email export#email artifact formats#forensic tool functionality#email preservation

Community Discussion

No community discussion yet for this question.

Full A30-327 Practice