Guidance Software Certification Exam For ENCE North America - GD0-100 Exam Practice Test
The Windows 98 Start Menu has a selection called documents which displays a list of recently used files. Which of the following The Windows 98 Start Menu has a selection called documents which displays a list of recently used files. Which of the following folders contain those files?
Correct Answer: D
Vote an answer
Within EnCase, you highlight a range of data within a file. The length indicator displays the value 30. How many bytes have you actually selected?
Correct Answer: B
Vote an answer
Within EnCase, clicking on Save on the toolbar affects what file(s)?
Correct Answer: D
Vote an answer
When can an evidence file containing a NTFS partition be logically restored to a FAT 32 partition?
Correct Answer: C
Vote an answer
A file extension and signature can be manually added by
Correct Answer: B
Vote an answer
This question addresses the EnCase for Windows search process. If a target word is within a logical file, and it begins in cluster 10 and ends in cluster 15 (the word is fragmented), the search
Correct Answer: D
Vote an answer
EnCase is able to read and examine which of the following file systems?
Correct Answer: A,B,C,D
Vote an answer
Which of the following selections is NOT found in the case file
Correct Answer: B
Vote an answer
Correct Answer:
You are investigating a case involving fraud. You seized a computer from a suspect who stated that the computer is not used by anyone other than himself. The computer has Windows 98 installed on the hard drive. You find the filename \downloads\check01.jpg that EnCase shows as being moved. The starting extent is 0C4057. You find another filename \downloads\chk1.dll?with the starting extent 0C4057, which EnCase also shows as being moved. In the \Windows\System? *** INCOMPLETE ***
Creating an image of a hard drive that was seized as evidence
Correct Answer: D
Vote an answer