Axiom Exam Study Guide UPDATED Actual Questions and CORRECT Answers
3 views 0 purchase
Course
Axiom
Institution
Axiom
Axiom Exam Study Guide UPDATED
Actual Questions and CORRECT Answers
When setting up a new case in Magnet AXIOM process, can you specify separate locations
for the case files and the evidence files? - CORRECT ANSWER- Yes
Which types of devices can be imaged using Magnet AXIOM Process? - CORREC...
Axiom Exam Study Guide UPDATED
Actual Questions and CORRECT Answers
When setting up a new case in Magnet AXIOM process, can you specify separate locations
for the case files and the evidence files? - CORRECT ANSWER✔✔- Yes
Which types of devices can be imaged using Magnet AXIOM Process? - CORRECT
ANSWER✔✔- Hard Drives, Thumb Drives, iOS Phones, Android phones
Is it possible to only scan Volume Shadow Copies from a drive? - CORRECT ANSWER✔✔-
Yes
Which option should be used when loading in data from an iOS or Android device? -
CORRECT ANSWER✔✔- Mobile
Can Magnet AXIOM Process filter files via hash values? - CORRECT ANSWER✔✔- Yes
What are the two main programs of the AXIOM forensics suite? - CORRECT ANSWER✔✔-
Examine & Process
AXIOM will run natively on a Mac computer. - CORRECT ANSWER✔✔- False
AXIOM Process and AXIOM Examine both can be run through a virtual machine. -
CORRECT ANSWER✔✔- True
What are the three distinct steps of the forensic process? - CORRECT ANSWER✔✔-
Acquisition or Extraction
Processing
Analysis
You are working a case and want to know if AXIOM supports extracting artifacts from the
app Yik Yak. What documentation can you view to determine if Yik Yak is supported? -
CORRECT ANSWER✔✔- Artifact reference
,What three licensing options are available for the user to license Magnet Forensics AXIOM?
- CORRECT ANSWER✔✔- License Key, Network Server, Axiom USB
AXIOM Process allows the user to set up the data for Acquisition (imaging) and Processing
in the same single step. - CORRECT ANSWER✔✔- True
When setting up an item of evidence for processing, what two options are available? -
CORRECT ANSWER✔✔- Load Evidence
Acquire Evidence
During setup for processing, the user can specify the Search Type to be conducted on an item
of digital evidence. - CORRECT ANSWER✔✔- True
You can specify that keyword searches be run against either Artifacts or All Content. -
CORRECT ANSWER✔✔- True
You suspect that a user has an encrypted mobile backup on their computer. You have a list of
ten possible passwords. How should you configure the options for processing the computer to
ensure that you get the information from the backups? - CORRECT ANSWER✔✔- Check
"Search Mobile Backups" and then enter each password that you have in the Mobile Backup
Passwords box.
When using Magnet.AI to categorize chats, the AI analysis is based on individual messages
and not on the entire chat conversation. - CORRECT ANSWER✔✔- False
The app Club Penguin is found on a suspect's phone. Through research, you determine that
AXIOM does not support the app and that the app stores information in a SQLite database.
What option can you select during processing to seek out the Club Penguin database? -
CORRECT ANSWER✔✔- Dynamic App Finder
It is possible to add evidence to a case that has already been processed. - CORRECT
ANSWER✔✔- True
, If the option "Automatically Build Connections" is checked, connections will automatically
be built during the first processing of the case but will NOT be built if any additional
evidence is added to the case. - CORRECT ANSWER✔✔- False
When in File System view, it is possible to view all sub-folders of the main folder that you
are clicked on? - CORRECT ANSWER✔✔- Yes
From the Case Dashboard, you chose the option "Categorize pictures with Magnet.AI."
Which of the following options are available for categorization? - CORRECT ANSWER✔✔-
All pictures
Which two hash formats does AXIOM use? - CORRECT ANSWER✔✔- MD5 SHA1
You want to create a full image of a hard drive. Which two image formats are available in
AXIOM? - CORRECT ANSWER✔✔- .E01 and .RAW
Since there are substantial differences between computer, mobile, and cloud artifacts,
separate AXIOM cases must be created for each type of evidence. - CORRECT
ANSWER✔✔- False
Which type of scan is the slowest? - CORRECT ANSWER✔✔- Sector Level Scan
During imaging, is it possible to break the image file created into segments? - CORRECT
ANSWER✔✔- Yes
When processing a case, you enable the option to Remove Duplicates. An identical picture
file is located in /Downloads and in /Documents/Pictures. Since processing removed
duplicates, only one of these files will be available to view in AXIOM Examine. - CORRECT
ANSWER✔✔- False
When setting up Keyword Search Types for All Content, the user can specify the Encoding
used for each keyword list. - CORRECT ANSWER✔✔- True
The benefits of buying summaries with Stuvia:
Guaranteed quality through customer reviews
Stuvia customers have reviewed more than 700,000 summaries. This how you know that you are buying the best documents.
Quick and easy check-out
You can quickly pay through credit card or Stuvia-credit for the summaries. There is no membership needed.
Focus on what matters
Your fellow students write the study notes themselves, which is why the documents are always reliable and up-to-date. This ensures you quickly get to the core!
Frequently asked questions
What do I get when I buy this document?
You get a PDF, available immediately after your purchase. The purchased document is accessible anytime, anywhere and indefinitely through your profile.
Satisfaction guarantee: how does it work?
Our satisfaction guarantee ensures that you always find a study document that suits you well. You fill out a form, and our customer service team takes care of the rest.
Who am I buying these notes from?
Stuvia is a marketplace, so you are not buying this document from us, but from seller MGRADES. Stuvia facilitates payment to the seller.
Will I be stuck with a subscription?
No, you only buy these notes for $9.49. You're not tied to anything after your purchase.
