Summer Sale Limited Time 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: ecus65

Guidance Software GD0-110 - Certification Exam for EnCE Outside North America

Guidance Software GD0-110 Premium Access     Download Demo    
Page: 1 / 6
Total 174 questions

The following GREP expression was typed in exactly as shown. Choose the answer(s) that would result. Jan 1 st , 2?0?00

A.

Jan 1st, 1900

B.

Jan 1st, 2000

C.

Jan 1st, 2001

D.

Jan 1st, 2100

If a hash analysis is run on a case, EnCase:

A.

Will compute a hash value of the evidence file and begin a verification process.

B.

Will generate a hash set for every file in the case.

C.

Will compare the hash value of the files in the case to the hash library.

D.

Will create a hash set to the user specifications.

When an EnCase user double-clicks on a file within EnCase what determines the action that will result?

A.

The settings in the case file.

B.

The setting in the evidence file.

C.

The settings in the FileTypes.ini file.

D.

Both a and b.

GREP terms are automatically recognized as GREP by EnCase.

A.

True

B.

False

When does the POST operation occur?

A.

When the power button to a computer is turned on.

B.

After a computer begins to boot from a device.

C.

When Windows starts up.

D.

When SCSI devices are configured.

A hard drive has 8 sectors per cluster. File Mystuff.doc has a logical file size of 13,000 bytes. How many clusters will be used by Mystuff.doc?

A.

1

B.

2

C.

3

D.

4

Within EnCase, what is the purpose of the temp folder?

A.

This is the folder that will automatically store an evidence file when the acquisition is made in DOS.

B.

This is the folder that temporarily stores all bookmark and search results.

C.

This is the folder used to hold copies of files that are sent to external viewers.

D.

This is the folder that will be automatically selected when the copy/unerase feature is used.

In hexadecimal notation, one byte is represented by _____ character(s).

A.

1

B.

2

C.

4

D.

8

In Windows, the file MyNote.txt is deleted from C Drive and is automatically sent to the recycle Bin. The long filename was MyNote.txt and the short filename was MYNOTE.TXT. When viewing the recycle Bin with EnCase, how will the long filename and short filename appear?

A.

MyNote.del, DC0.del

B.

MyNote.txt, CD0.txt

C.

MyNote.txt, DC0.txt

D.

MyNote.del, DC1.del

Changing the filename of a file will change the hash value of the file.

A.

True

B.

False