Certification Exam For ENCE North America (GD0-100) Practice Test

Questions # 11:

What information in a FAT file system directory entry refers to the location of a file on the hard drive?

Options:

The file size

The file attributes

The starting cluster

The fragmentation settings

Questions # 12:

When a file is deleted in the FAT or NTFS file systems, what happens to the data on the hard drive?

Options:

Nothing

It is moved to a special area.

It is overwritten with zeroes.

The file header is marked with a Sigma so the file is not recognized by the operating system.

Questions # 13:

GREP terms are automatically recognized as GREP by EnCase.

Options:

True

False

Questions # 14:

Which of the following statements is more accurate?

Options:

The Recycle Bin increases the chance of locating the existence of a file on a computer.

The Recycle Bin reduces the chance of locating the existence of a file on a computer.

Questions # 15:

A logical file would be best described as:

Options:

The data taken from the starting cluster to the end of the last cluster that is occupied by the file.

A file including any RAM and disk slack.

A file including only RAM slack.

The data from the beginning of the starting cluster to the length of the file.

Questions # 16:

A hard drive was imaged using EnCase. The original drive was placed into evidence. The restore feature was used to make a copy of the original hard drive. EnCase verifies the restored copy using:

Options:

An MD5 hash

A 32 bit CRC

Nothing. Restored volumes are not verified.

A running log

Questions # 17:

An Enhanced Metafile would best be described as:

Options:

A compressed zip file.

A graphics file attached to an e-mail message.

A compound e-mail attachment.

A file format used in the printing process by Windows.

Questions # 18:

Bookmarks are stored in which of the following files?

Options:

The case file

The evidence file

The configuration Bookmarks.ini file

All of the above

Questions # 19:

The FAT in the File Allocation Table file system keeps track of:

Options:

File fragmentation

Clusters marked as bad

Every addressable cluster on the partition

All of the above.

Questions # 20:

What does the acronym BIOS stand for?

Options:

Basic Integrated Operating System

Basic Input/Output System

Binary Input/Output System

Binary Integrated Operating System

Viewing page 2 out of 6 pages

Viewing questions 11-20 out of questions

Summer Certification Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code = getmirror

Pass the Guidance Software EnCE GD0-100 Questions and answers with ExamsMirror

Exam GD0-100 Premium Access

Options:

Options:

Options:

Options:

Options:

Options:

Options:

Options:

Options:

Options:

TOP CODES