Certification Exam For ENCE North America (GD0-100) Practice Test

Questions # 1:

In DOS acquisition mode, if a physical drive is detected, but no partition information is displayed, what would be the cause:

Options:

Both a and b

The partition scheme is not recognized by DOS.

Neither a or b

There are no partitions present.

Questions # 2:

The maximum file segment size for an EnCase evidence file is:

Options:

1500 MB

1000 MB

2000 MB

There is no limit.

500 MB

Questions # 3:

Select the appropriate name for the highlighted area of the binary numbers.

Questions # 4:

By default, EnCase will display the data from the end of a logical file, to the end of the cluster, in what color:

Options:

Red

Red on black

Black on red

Black

Questions # 5:

An EnCase evidence file of a hard drive ________ be restored to another hard drive of equal or greater size.

Options:

can

cannot

Questions # 6:

Which of the following would be a true statement about the function of the BIOS?

Options:

The BIOS integrates compressed executable files with memory addresses for faster execution.

The BIOS is responsible for checking and configuring the system after the power is turned on.

The BIOS is responsible for swapping out memory pages when RAM fills up.

Both a and c.

Questions # 7:

The case number in an evidence file can be changed without causing the verification feature to report an error, if:

Options:

The user utilizes a text editor.

The case information cannot be changed in an evidence file, without causing the verification feature to report an error.

The user utilizes the case information editor within EnCase.

The evidence file is reacquired.

Questions # 8:

The spool files that are created during a print job are __________ after the print job is completed.

Options:

moved

wiped

deleted and wiped

deleted

Questions # 9:

A file extension and signature can be manually added by:

Options:

Using the new library feature under hash libraries.

Right-clicking on a file and selecting dd.?

Using the new set feature under hash sets.

Using the new file signature feature under file signatures.

Questions # 10:

A signature analysis has been run on a case. The result ?*JPEG ?in the signature column means:

Options:

The file signature is unknown and the header is a JPEG.

The file signature is a JPEG signature and the file extension is incorrect.

The file signature is unknown and the file extension is JPEG.

None of the above.

Viewing page 1 out of 6 pages

Viewing questions 1-10 out of questions

Weekend Special Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code = simple70

Pass the Guidance Software EnCE GD0-100 Questions and answers with ExamsMirror

Exam GD0-100 Premium Access

Options:

Options:

Options:

Options:

Options:

Options:

Options:

Options:

Options:

Options:

TOP CODES