Within EnCase, you highlight a range of data within a file. The length indicator displays the value 30. How many bytes have you actually selected?
A. 30
B. 3
C. 60
D. 15
Bookmarks are stored in which of the following files?
A. The case file
B. The evidence file
C. The configuration Bookmarks.ini file
D. All of the above
You are at an incident scene and determine that a computer contains evidence as described in the search warrant. When you seize the computer, you should:
A. Record nothing to avoid inaccuracies that might jeopardize the use of the evidence.
B. Record the location that the computer was recovered from.
C. Record the identity of the person(s) involved in the seizure.
D. Record the date and time the computer was seized.
Changing the filename of a file will change the hash value of the file.
A. True
B. False
Calls to the C:\ volume of the hard drive are not made by DOS when a computer is booted with a standard DOS 6.22 boot disk.
A. False
B. True
When a drive letter is assigned to a logical volume, that information is temporarily written the volume boot record on the hard drive.
A. True
B. False
The following keyword was typed in exactly as shown. Choose the answer(s) that would result. All search criteria have default settings. Tom Jones
A. tom jones
B. Tom
C. Jones
D. Tom Jones
Which statement would most accurately describe a motherboard?
A. An add-in card that handles allRAM.
B. Any circuit board, regardless of its function.
C. The main circuit board that has slots for the microprocessor, RAM, ROM, and add-in cards.
D. An add-in card that controls all hard drive activity.
To undelete a file in the FAT file system, EnCase computes the number of _______ the file will use based on the file ______.
A. Clusters;starting extent
B. Sectors;starting extent
C. Clusters;file size
D. Sectors;file size
A case file can contain ____ hard drive images?
A. 5
B. 1
C. any number of
D. 10
Nowadays, the certification exams become more and more important and required by more and more enterprises when applying for a job. But how to prepare for the exam effectively? How to prepare for the exam in a short time with less efforts? How to get a ideal result and how to find the most reliable resources? Here on Vcedump.com, you will find all the answers. Vcedump.com provide not only Guidance Software exam questions, answers and explanations but also complete assistance on your exam preparation and certification application. If you are confused on your GD0-100 exam preparations and Guidance Software certification application, do not hesitate to visit our Vcedump.com to find your solutions here.