[&] Which system utility in Windows provides information about drives and partitions?
- System
- Device Manager
- File Explorer
- Disk Management

[&] Which option is selected to remove all evidence items from FTK imager?
- Export Files
- Decrypt AD1 image
- Remove All Evidence Items
- Remove Evidence Item

[&] Which option scans all the drives, partitions on the system and then attaches them to FTK imager?
- Add Evidence Item
- Image Mounting
- Add All Attached Devices
- Create Disk Image

[&] All of the following options are provided by the FTK imager except ...
- Add Evidence Item
- Export Disk Image
- Remove Disk Image
- Image Mounting

[&] Which source evidence type is selected to analyze a forensic image?
- Physical Drive
- Contents of a Folder
- Image File
- Logical Drive