nerdexam
Access_Data

A30-327 · Question #39

When using Registry Viewer to view a key with 20 values, what option can be used to display only 5 of the 20 values in a report?

The correct answer is C. Summary Report. Summary Report (C) is correct because, in Registry Viewer, this option allows the examiner to selectively include specific values from a key in a report - meaning you can choose just 5 of the 20 values rather than capturing everything. A (Report) generates a full report of the…

Artifact Analysis (e.g., Internet history, email, registry)

Question

When using Registry Viewer to view a key with 20 values, what option can be used to display only 5 of the 20 values in a report?

Options

  • AReport
  • BSpecial Reports
  • CSummary Report
  • DAdd to Report With Children

How the community answered

(29 responses)
  • A
    3% (1)
  • C
    90% (26)
  • D
    7% (2)

Explanation

Summary Report (C) is correct because, in Registry Viewer, this option allows the examiner to selectively include specific values from a key in a report - meaning you can choose just 5 of the 20 values rather than capturing everything.

  • A (Report) generates a full report of the selected key and all its values, giving you no ability to filter down to a subset.
  • B (Special Reports) refers to predefined report templates for specific registry artifacts, not a mechanism for manually selecting individual values.
  • D (Add to Report With Children) adds the entire key along with all its child keys and their values, which would actually give you more data, not less.

Memory tip: Think "Summary = Selective" - just as a written summary condenses a full document to only the key points you choose, Summary Report lets you hand-pick which values make it into the output.

Topics

#Registry Analysis#Report Filtering#Registry Viewer#Artifact Reporting

Community Discussion

No community discussion yet for this question.

Full A30-327 Practice