nerdexam
Access_Data

A30-327 · Question #29

You examine evidence and flag several graphic images found in different folders. You now want to bookmark these items into a single bookmark. Which tab in FTK do you use to view only the flagged…

The correct answer is C. Overview tab. In AccessData FTK, the Overview tab contains a "Flagged Files" category in its file summary panel, allowing you to view only the items you've manually flagged - including graphic thumbnails - regardless of which folder they originated from. This makes it the correct place to…

Forensic Process and Best Practices

Question

You examine evidence and flag several graphic images found in different folders. You now want to bookmark these items into a single bookmark. Which tab in FTK do you use to view only the flagged thumbnails?

Options

  • AExplore tab
  • BGraphics tab
  • COverview tab
  • DBookmark tab

How the community answered

(55 responses)
  • A
    2% (1)
  • B
    2% (1)
  • C
    93% (51)
  • D
    4% (2)

Explanation

In AccessData FTK, the Overview tab contains a "Flagged Files" category in its file summary panel, allowing you to view only the items you've manually flagged - including graphic thumbnails - regardless of which folder they originated from. This makes it the correct place to collect and review your flagged images before grouping them into a single bookmark.

Why the distractors are wrong:

  • A. Explore tab - mirrors a Windows Explorer-style directory tree view; it shows files by folder structure, not by flag status.
  • B. Graphics tab - displays all graphics in the case as thumbnails, with no filter for only flagged items.
  • D. Bookmark tab - shows items you've already bookmarked; the scenario describes a step before bookmarking is complete.

Memory tip: Think "Overview = audit trail before you act." You overview what you've flagged, then use that list to create the bookmark - so Overview comes before Bookmark in the workflow.

Topics

#FTK interface#flagging evidence#thumbnail viewing#evidence organization

Community Discussion

No community discussion yet for this question.

Full A30-327 Practice