Guidance Software Guidance Software Certification GD0-100 Questions & Answers

• Question 1:

  The BIOS chip on an IBM clone computer is most commonly located on:

  A. The RAM chip

  B. The controller card

  C. The motherboard

  D. The microprocessor

  Correct Answer: C

• Question 2:

  Within EnCase for Windows, the search process is:

  A. None of the above

  B. both a and b

  C. a search of the physical disk in unallocated clusters and other unused disk areas

  D. a search of the logical files

  Correct Answer: B

• Question 3:

  An EnCase evidence file of a hard drive ________ be restored to another hard drive of equal or greater size.

  A. can

  B. cannot

  Correct Answer: A

• Question 4:

  To generate an MD5 hash value for a file, EnCase:

  A. Computes the hash value including the logical file and filename.

  B. Computes the hash value including the physical file and filename.

  C. Computes the hash value based on the logical file.

  D. Computes the hash value based on the physical file.

  Correct Answer: C

• Question 5:

  Select the appropriate name for the highlighted area of the binary numbers.

  A. Bit

  B. Nibble

  C. Word

  D. Dword

  E. Byte

  Correct Answer: C

• Question 6:

  The acronym ASCII stands for:

  A. American Standard Communication Information Index

  B. American Standard Code for Information Interchange

  C. Accepted Standard Code for Information Interchange

  D. Accepted Standard Communication Information Index

  Correct Answer: B

• Question 7:

  How many partitions can be found in the boot partition table found at the beginning of the drive?

  A. 8

  B. 4

  C. 6

  D. 2

  Correct Answer: B

• Question 8:

  Within EnCase for Windows, the search process is:

  A. None of the above

  B. both a and b

  C. a search of the physical disk in unallocated clusters and other unused disk areas

  D. a search of the logical files

  Correct Answer: B

• Question 9:

  The default export folder remains the same for all cases.

  A. True

  B. False

  Correct Answer: B

• Question 10:

  EnCase can build a hash set of a selected group of files.

  A. True

  B. False

  Correct Answer: A