1. Home
  2. Guidance Software
  3. GD0-100

Certification For ENCE North America

Exam Details

  • Exam Code
    :GD0-100
  • Exam Name
    :Certification For ENCE North America
  • Certification
    :Guidance Software Certifications
  • Vendor
    :Guidance Software
  • Total Questions
    :185 Q&As
  • Last Updated
    :Jul 06, 2025

Guidance Software Guidance Software Certifications GD0-100 Questions & Answers

  • Question 141:

    Select the appropriate name for the highlighted area of the binary numbers.

    A. Byte

    B. Dword

    C. Word

    D. Bit

    E. Nibble

  • Question 142:

    If cases are worked on a lab drive in a secure room, without any cleaning of the contents of the drive, which of the following areas would be of most concern?

    A. There is no concern

    B. Cross-contamination

    C. Chain-of-custody

    D. Storage

  • Question 143:

    Which of the following is commonly used to encode e-mail attachments?

    A. GIF

    B. EMF

    C. JPEG

    D. Base64

  • Question 144:

    The EnCase methodology dictates that ________ be created prior to acquiring evidence.

    A. a unique directory on the lab drive for case management

    B. a text file for notes

    C. All of the above

    D. an .E01 file on the lab drive

  • Question 145:

    Select the appropriate name for the highlighted area of the binary numbers.

    A. Byte

    B. Dword

    C. Bit

    D. Word

    E. Nibble

  • Question 146:

    What information in a FAT file system directory entry refers to the location of a file on the hard drive?

    A. The file size

    B. The file attributes

    C. The starting cluster

    D. The fragmentation settings

  • Question 147:

    Which of the following items could contain digital evidence?

    A. Credit card readers

    B. Personal assistant devices

    C. Cellular phones

    D. Digital cameras

  • Question 148:

    A signature analysis has been run on a case. The result ?*JPEG ?in the signature column means:

    A. The file signature is unknown and the header is a JPEG.

    B. The file signature is a JPEG signature and the file extension is incorrect.

    C. The file signature is unknown and the file extension is JPEG.

    D. None of the above.

  • Question 149:

    The following GREP expression was typed in exactly as shown. Choose the answer(s) that would result.[\x00- \x05]\x00\x00?andgt;[?[@?[?[?[

    A. FF 0000 00 00 FF BA

    B. 0000 00 01 FF FF BA

    C. 04 06 0000 00 FF FF BA

    D. 04 0000 00 FF FF BA

  • Question 150:

    What files are reconfigured or deleted by EnCase during the creation of an EnCase boot disk?

    A. command.com

    B. autoexec.bat

    C. drvspace.bin

    D. io.sys

Related Exams:

Tips on How to Prepare for the Exams

Nowadays, the certification exams become more and more important and required by more and more enterprises when applying for a job. But how to prepare for the exam effectively? How to prepare for the exam in a short time with less efforts? How to get a ideal result and how to find the most reliable resources? Here on Vcedump.com, you will find all the answers. Vcedump.com provide not only Guidance Software exam questions, answers and explanations but also complete assistance on your exam preparation and certification application. If you are confused on your GD0-100 exam preparations and Guidance Software certification application, do not hesitate to visit our Vcedump.com to find your solutions here.