Certification Exam for EnCE Outside North America (GD0-110) Practice Test

Questions # 31:

If cluster #3552 entry in the FAT table contains a value of this would mean:

Options:

The cluster is allocated

The cluster is unallocated

The cluster is marked bad

The cluster is the end of a file

Questions # 32:

You are an investigator and have encountered a computer that is running at the home of a suspect. The computer does not appear to be a part of a network. The operating system is Windows XP Home. No programs are visibly running. You should:

Options:

Shut it down with the start menu.

Pull the plug from the wall.

Turn it off with the power button.

Pull the plug from the back of the computer.

Questions # 33:

A signature analysis has been run on a case. The result ?*JPEG ?in the signature column means:

Options:

The file signature is unknown and the file extension is JPEG.

The file signature is unknown and the header is a JPEG.

The file signature is a JPEG signature and the file extension is incorrect.

None of the above.

Questions # 34:

RAM is used by the computer to:

Options:

Permanently store electronic data.

Execute the POST during start-up.

Temporarily store electronic data that is being processed.

Establish a connection with external devices.

Questions # 35:

An EnCase evidence file of a hard drive ________ be restored to another hard drive of equal or greater size.

Options:

can

cannot

Questions # 36:

The end of a logical file to the end of the cluster that the file ends in is called:

Options:

Unallocated space

Allocated space

Available space

Slack

Questions # 37:

Consider the following path in a FAT file system: C:\My Documents\My Pictures\Bikes. Where does the directory bikes receive its name?

Options:

From the My Pictures directory

From itself

From the root directory c:\

From the My Documents directory

Questions # 38:

A SCSI host adapter would most likely perform which of the following tasks?

Options:

Make SCSI hard drives and other SCSI devices accessible to the operating system.

Configure the motherboard settings to the BIOS.

Set up the connection of IDE hard drives.

None of the above.

Questions # 39:

Temp files created by EnCase are deleted when EnCase is properly closed.

Options:

True

False

Questions # 40:

EnCase marks a file as overwritten when _____________ has been allocated to another file.

Options:

any part of the file

all of the file

the starting cluster of the file

the directory entry for the file

Viewing page 4 out of 6 pages

Viewing questions 31-40 out of questions

Summer Certification Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code = getmirror

Pass the Guidance Software EnCE GD0-110 Questions and answers with ExamsMirror

Exam GD0-110 Premium Access

Options:

Options:

Options:

Options:

Options:

Options:

Options:

Options:

Options:

Options:

TOP CODES