nerdexam
Access_Data

A30-327 · Question #38

What are two functions of the Summary Report in Registry Viewer? (Choose two.)

The correct answer is A. adds individual key values B. is a template for other registry files. Options A and B correctly describe the Summary Report in Registry Viewer because it serves dual purposes: it allows an investigator to selectively add individual key values of interest to compile a focused report, and it functions as a template that can be applied when…

Artifact Analysis (e.g., Internet history, email, registry)

Question

What are two functions of the Summary Report in Registry Viewer? (Choose two.)

Options

  • Aadds individual key values
  • Bis a template for other registry files
  • Cdisplays investigator keyword search results
  • Dpermits searching of registry values based on key headers

How the community answered

(38 responses)
  • A
    89% (34)
  • C
    3% (1)
  • D
    8% (3)

Explanation

Options A and B correctly describe the Summary Report in Registry Viewer because it serves dual purposes: it allows an investigator to selectively add individual key values of interest to compile a focused report, and it functions as a template that can be applied when examining other registry files, making repeated investigations more efficient.

Option C is incorrect because displaying keyword search results is a function of the search results pane or report, not the Summary Report itself. Option D is also incorrect because searching registry values by key headers is a distinct search functionality, separate from what the Summary Report generates or manages.

Memory tip: Think of the Summary Report as a "clipboard + stencil" - you clip individual key values onto it (A), and then reuse it as a stencil/template for other registry files (B). Anything involving searching or displaying search results belongs to different tool features, not the Summary Report.

Topics

#Registry analysis#Registry Viewer#Summary Report#Artifact examination

Community Discussion

No community discussion yet for this question.

Full A30-327 Practice