1. Home
  2. Guidance Software
  3. GD0-100

Certification For ENCE North America

Exam Details

  • Exam Code
    :GD0-100
  • Exam Name
    :Certification For ENCE North America
  • Certification
    :Guidance Software Certifications
  • Vendor
    :Guidance Software
  • Total Questions
    :185 Q&As
  • Last Updated
    :Jul 06, 2025

Guidance Software Guidance Software Certifications GD0-100 Questions & Answers

  • Question 161:

    How does EnCase verify that the evidence file contains an exact copy of the suspect hard drive? How does EnCase verify that the evidence file contains an exact copy of the suspect's hard drive?

    A. By means of a CRC value of the suspect hard drive compared to a CRC value of the data stored in the evidence file.By means of a CRC value of the suspect? hard drive compared to a CRC value of the data stored in the evidence file.

    B. By means of an MD5 hash of the suspect hard drive compared to an MD5 hash of the data stored in the evidence file.By means of an MD5 hash of the suspect? hard drive compared to an MD5 hash of the data stored in the evidence file.

    C. By means of a CRC value of the evidence file itself.

    D. By means of an MD5 hash value of the evidence file itself.

  • Question 162:

    Pressing the power button on a computer that is running could have which of the following results?

    A. The computer will instantly shut off.

    B. The computer will go into stand-by mode.

    C. Nothing will happen.

    D. All of the above could happen.

    E. The operating system will shut down normally.

  • Question 163:

    The following GREP expression was typed in exactly as shown. Choose the answer(s) that would result. Jan 1 st , 2?0?00

    A. Jan 1st , 1900

    B. Jan 1st , 2100

    C. Jan 1st , 2001

    D. Jan 1st , 2000

  • Question 164:

    An evidence file can be moved to another directory without changing the file verification.

    A. False

    B. True

  • Question 165:

    A standard Windows 98 boot disk is acceptable for booting a suspect drive.

    A. True

    B. False

  • Question 166:

    Search terms are case sensitive by default.

    A. False

    B. True

  • Question 167:

    If a floppy diskette is in the ?drive, the computer will always boot to that drive before any other device. If a floppy diskette is in the drive, the computer will always boot to that drive before any other device.

    A. False

    B. True

  • Question 168:

    EnCase is able to read and examine which of the following file systems?

    A. NTFS

    B. EXT3

    C. FAT

    D. HFS

  • Question 169:

    ROM is an acronym for:

    A. Read Open Memory

    B. Random Open Memory

    C. Read Only Memory

    D. Relative Open Memory

  • Question 170:

    Within EnCase, clicking on Save on the toolbar affects what file(s)?

    A. All of the above

    B. The evidence files

    C. The open case file

    D. The configuration .ini files

Related Exams:

Tips on How to Prepare for the Exams

Nowadays, the certification exams become more and more important and required by more and more enterprises when applying for a job. But how to prepare for the exam effectively? How to prepare for the exam in a short time with less efforts? How to get a ideal result and how to find the most reliable resources? Here on Vcedump.com, you will find all the answers. Vcedump.com provide not only Guidance Software exam questions, answers and explanations but also complete assistance on your exam preparation and certification application. If you are confused on your GD0-100 exam preparations and Guidance Software certification application, do not hesitate to visit our Vcedump.com to find your solutions here.