Certification Exam for EnCE Outside North America (GD0-110) Practice Test

Questions # 1:

Select the appropriate name for the highlighted area of the binary numbers.

Questions # 2:

A personal data assistant was placed in a evidence locker until an examiner has time to examine it. Which of the following areas would require special attention?

Options:

Cross-contamination

Storage

Chain-of-custody

There is no concern

Questions # 3:

This question addresses the EnCase for Windows search process. If a target word is within a logical file, and it begins in cluster 10 and ends in cluster 15 (the word is fragmented), the search:

Options:

Will not find it because the letters of the keyword are not contiguous.

Will not find it unless File slack is checked on the search dialog box.

Will find it because EnCase performs a logical search.

Will not find it because EnCase performs a physical search only.

Questions # 4:

Which of the following items could contain digital evidence?

Options:

Cellular phones

Digital cameras

Personal assistant devices

Credit card readers

Questions # 5:

The acronym ASCII stands for:

Options:

Accepted Standard Communication Information Index

American Standard Code for Information Interchange

Accepted Standard Code for Information Interchange

American Standard Communication Information Index

Questions # 6:

All investigators using EnCase should run tests on the evidence file acquisition and verification process to:

Options:

Further the investigator understanding of the evidence file.

Give more weight to the investigator testimony in court.

Insure that the investigator is using the proper method of acquisition.

All of the above.

Questions # 7:

RAM is tested during which phase of the power-up sequence?

Options:

Pre-POST

During POST

After POST

None of the above.

Questions # 8:

To undelete a file in the FAT file system, EnCase obtains the starting extent from the:

Options:

FAT

File header

Operating system

Directory entry

Questions # 9:

What information should be obtained from the BIOS during computer forensic investigations?

Options:

The video caching information

The port assigned to the serial port

The date and time

The boot sequence

Questions # 10:

A logical file would be best described as:

Options:

The data from the beginning of the starting cluster to the length of the file.

The data taken from the starting cluster to the end of the last cluster that is occupied by the file.

A file including any RAM and disk slack.

A file including only RAM slack.

Viewing page 1 out of 6 pages

Viewing questions 1-10 out of questions

Weekend Special Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code = simple70

Pass the Guidance Software EnCE GD0-110 Questions and answers with ExamsMirror

Exam GD0-110 Premium Access

Options:

Options:

Options:

Options:

Options:

Options:

Options:

Options:

Options:

Options:

TOP CODES