Certification Exam for EnCE Outside North America (GD0-110) Practice Test

Questions # 11:

A physical file size is:

Options:

The total size in bytes of a logical file.

The total size in sectors of an allocated file.

The total size of all the clusters used by the file measured in bytes.

The total size of the file including the ram slack in bytes.

Questions # 12:

The EnCase evidence file logical filename can be changed without affecting the verification of the acquired evidence.

Options:

True

False

Questions # 13:

ROM is an acronym for:

Options:

Read Only Memory

Random Open Memory

Relative Open Memory

Read Open Memory

Questions # 14:

EnCase is able to read and examine which of the following file systems?

Options:

NTFS

FAT

EXT3

HFS

Questions # 15:

How does EnCase verify that the evidence file contains an exact copy of the suspect hard drive?

Options:

By means of an MD5 hash of the suspect hard drive compared to an MD5 hash of the data stored in the evidence file.

By means of a CRC value of the suspect hard drive compared to a CRC value of the data stored in the evidence file.

By means of an MD5 hash value of the evidence file itself.

By means of a CRC value of the evidence file itself.

Questions # 16:

A hash set would most accurately be described as:

Options:

A group of hash libraries organized by category.

A table of file headers and extensions.

A group of hash values that can be added to the hash library.

Both a and b.

Questions # 17:

In the EnCase environment, the term uxternal viewers is best described as:

Options:

Programs that are exported out of an evidence file.

Programs that are associated with EnCase to open specific file types.

Any program that is loaded on the lab hard drive.

Any program that will work with EnCase.

Questions # 18:

Searches and bookmarks are stored in the evidence file.

Options:

True

False

Questions # 19:

Pressing the power button on a computer that is running could have which of the following results?

Options:

The operating system will shut down normally.

The computer will instantly shut off.

The computer will go into stand-by mode.

Nothing will happen.

All of the above could happen.

Questions # 20:

What does the acronym BIOS stand for?

Options:

Basic Integrated Operating System

Basic Input/Output System

Binary Integrated Operating System

Binary Input/Output System

Viewing page 2 out of 6 pages

Viewing questions 11-20 out of questions

Summer Certification Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code = getmirror

Pass the Guidance Software EnCE GD0-110 Questions and answers with ExamsMirror

Exam GD0-110 Premium Access

Options:

Options:

Options:

Options:

Options:

Options:

Options:

Options:

Options:

Options:

TOP CODES