Chiron Exams All exams Ask for access

All exams › Exterro

ACE practice examsIn development

AccessData Certified Examiner

Exterro · intermediate · An online proctored practical examination

In developmentThis course is still being brought to our full standard. The questions and notes are usable, but they have not yet been checked line by line against the vendor’s own training.

Computer forensics with FTK and its database-first design: processing all evidence into a searchable index up front so later search is near-instant, deliberate processing options and hash libraries chosen at the start to avoid a costly reprocess, signature analysis exposing disguised files, and the Known File Filter excluding known-good files; then index and live searching for words and patterns, tabs, filters and bookmarks narrowing millions of items to the few that matter, artefact analysis reconstructing user activity from the registry and logs, and defensible reporting built from bookmarks.

What you get

180practice questions
3full papers of 60
2course chapters · 12 minutes
100%answers explained

Papers are cut from the bank and weighted like the real exam, and no question appears in two of them. Every wrong answer comes back on later days until you have it right.

What the exam covers

The domains our question bank is built on. We have not yet transcribed this vendor’s own outline for this exam.

FTK, processing and the case databaseNot published
Searching, analysis and reportingNot published

Two sample questions

Two of the 180, with the answer and the explanation.

1. Which practice organises findings during review?

  1. Exporting each relevant item as it is found
  2. Filtering the case down to the relevant items
  3. Tagging, or bookmarking, the relevant items — correct
  4. Re-hashing the items that turn out to matter

Why: Tagging marks relevant items so they can be gathered, reviewed, and reported consistently.

2. Why is the up-front cost worthwhile in a large case?

  1. Repeated searches become fast and repeatable — correct
  2. It avoids ever having to hash any of the files
  3. It removes the need for a report
  4. It changes the acquired image

Why: One heavy processing pass makes every later search fast, which pays off across a long investigation.

The real ACE exam

LengthAn online proctored practical examination
QuestionsA knowledge and practical exam using FTK and a provided evidence set
Pass mark80%
PriceThe exam is offered at no cost; training is sold separately
Recommended before you sit itNone enforced. Familiarity with FTK, Registry Viewer and the AccessData tools is assumed.
Valid for2 years, renewed by re-examination on the current version

Exam facts as published by Exterro; always check the vendor’s page before you book.

Study ACE with Chiron

Chiron is invitation-only while we are in beta, and nothing is for sale yet: invited accounts use every paper, drill and course note for free.