Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

WGU Digital Forensics in Cybersecurity (D829) Exam - Topic 5 Question 17 Discussion

Posted by Adolph on Sep 26, 2026 at 06:37 AM

Which description applies to the Advanced Forensic Format (AFF)?

Suggested Answer: C

Comprehensive and Detailed Explanation From Exact Extract:

The Advanced Forensic Format (AFF) is an open file format designed for storing disk images and related forensic metadata. It was developed by the Sleuth Kit community and is supported by forensic tools such as Sleuth Kit and Autopsy. AFF allows efficient storage, compression, and metadata annotation, which makes it suitable for forensic investigations.

AccessData is known for FTK format, not AFF.

iLook uses proprietary formats unrelated to AFF.

Guidance Software developed the EnCase Evidence File (E01) format.

AFF is widely recognized in open-source forensic toolchains.


The AFF format and its use with Sleuth Kit and Autopsy are documented in digital forensics literature and the AFF official documentation, as endorsed by the NIST and forensic tool developer communities.

Get Premium Digital Forensics in Cybersecurity (D829) Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test
4 comments · newest first
FR
Fredric 39 minutes ago
I’m leaning towards D being correct since Guidance Software is well-known for proprietary formats, but I could be mistaken.
RE
Renea 5 days ago
I feel like I’ve seen a question similar to this before, and I think it was about Sleuth Kit using an open file standard.
ST
Stefan 10 days ago
I remember studying that AFF is a proprietary format, but I can’t recall if it was specifically for iLook or another tool.
RO
Roslyn 16 days ago
I think AFF is related to AccessData, but I’m not entirely sure if it’s an open file standard or something else.
0/2000 characters

Save Cancel