1. Home
  2. Guidance Software
  3. GD0-100

Certification For ENCE North America

Exam Details

  • Exam Code
    :GD0-100
  • Exam Name
    :Certification For ENCE North America
  • Certification
    :Guidance Software Certifications
  • Vendor
    :Guidance Software
  • Total Questions
    :185 Q&As
  • Last Updated
    :Jul 06, 2025

Guidance Software Guidance Software Certifications GD0-100 Questions & Answers

  • Question 121:

    Select the appropriate name for the highlighted area of the binary numbers.

    A. Word

    B. Dword

    C. Byte

    D. Nibble

    E. Bit

  • Question 122:

    A suspect typed a file on his computer and saved it to a floppy diskette. The filename was MyNote.txt. You receive the floppy and the suspect computer. The suspect denies that the floppy disk belongs to him. You search the suspect computer and locate only the suspect? computer. The suspect denies that the floppy disk belongs to him. You search the suspect? computer and locate only the filename within a .LNK file. The .LNK file is located in the folder C:\Windows \Recent. How you would use the .LNK file to establish a connection between the file on the floppy diskette and the suspect computer? connection between the file on the floppy diskette and the suspect? computer?

    A. Both a and b

    B. The dates and time of the file found in the .LNK file, at file offset 28

    C. The full path of the file, found in the .LNK file

    D. The file signature found in the .LNK file

  • Question 123:

    A sector on a floppy disk is the same size as a sector on a NTFS formatted hard drive.

    A. False

    B. True

  • Question 124:

    The EnCase evidence file logical filename can be changed without affecting the verification of the acquired evidence.

    A. True

    B. False

  • Question 125:

    In the FAT file system, the size of a deleted file can be found:

    A. In the FAT

    B. In the directory entry

    C. In the file footer

    D. In the file header

  • Question 126:

    An Enhanced Metafile would best be described as:

    A. A compressed zip file.

    B. A graphics file attached to an e-mail message.

    C. A compound e-mail attachment.

    D. A file format used in the printing process by Windows.

  • Question 127:

    How many clusters can a FAT 16 system address?

    A. 65,536

    B. 4,096

    C. 268,435,456

    D. 4,294,967,296

  • Question 128:

    When a document is printed using EMF in Windows, what file(s) are generated in the spooling process?

    A. The .SHD file

    B. The .SPL file

    C. Neither a or b

    D. Both a and b

  • Question 129:

    EnCase marks a file as overwritten when _____________ has been allocated to another file.

    A. all of the file

    B. the starting cluster of the file

    C. the directory entry for the file

    D. any part of the file

  • Question 130:

    A hard drive has 8 sectors per cluster. File Mystuff.doc has a logical file size of 13,000 bytes. How many clusters will be used by Mystuff.doc?

    A. 4

    B. 1

    C. 2

    D. 3

Related Exams:

Tips on How to Prepare for the Exams

Nowadays, the certification exams become more and more important and required by more and more enterprises when applying for a job. But how to prepare for the exam effectively? How to prepare for the exam in a short time with less efforts? How to get a ideal result and how to find the most reliable resources? Here on Vcedump.com, you will find all the answers. Vcedump.com provide not only Guidance Software exam questions, answers and explanations but also complete assistance on your exam preparation and certification application. If you are confused on your GD0-100 exam preparations and Guidance Software certification application, do not hesitate to visit our Vcedump.com to find your solutions here.