1. Home
  2. Guidance Software
  3. GD0-110

Certification Exam for EnCE Outside North America

Exam Details

  • Exam Code
    :GD0-110
  • Exam Name
    :Certification Exam for EnCE Outside North America
  • Certification
    :Guidance Software Certification
  • Vendor
    :Guidance Software
  • Total Questions
    :174 Q&As
  • Last Updated
    :May 12, 2024

Guidance Software Guidance Software Certification GD0-110 Questions & Answers

  • Question 21:

    EnCase uses the to conduct a signature analysis.

    A. file signature table

    B. hash library

    C. Both a and b

    D. file Viewers

  • Question 22:

    When a document is printed using EMF in Windows, what file(s) are generated in the spooling process?

    A. The .SHD file

    B. The .SPL file

    C. Both a and b

    D. Neither a or b

  • Question 23:

    The Windows 98 Start Menu has a selection called ocuments?which displays a list of recently used files. Which of the following The Windows 98 Start Menu has a selection called documents which displays a list of recently used files. Which of the following folders contain those files?

    A. C:\Windows\History

    B. C:\Windows\Documents

    C. C:\Windows\Start menu\Documents

    D. C:\Windows\Recent

  • Question 24:

    Search terms are case sensitive by default.

    A. True

    B. False

  • Question 25:

    Search terms are stored in what .ini configuration file?

    A. FileTypes.ini

    B. FileSignatures.ini

    C. TextStyle.ini

    D. Keywords.ini

  • Question 26:

    The MD5 hash algorithm produces a number.

    A. 32 bit

    B. 128 bit

    C. 64 bit

    D. 256 bit

  • Question 27:

    Which of the following is found in the FileSignatures.ini configuration file?

    A. The information contained in the signature table

    B. The results of a signature analysis

    C. Pointers to an evidence file

    D. The results of a hash analysis

  • Question 28:

    RAM is tested during which phase of the power-up sequence?

    A. None of the above.

    B. During POST

    C. After POST

    D. Pre-POST

  • Question 29:

    To undelete a file in the FAT file system, EnCase obtains the starting extent from the:

    A. Directory entry

    B. Operating system

    C. File header

    D. FAT

  • Question 30:

    If an evidence file has been added to a case and completely verified, what happens if the data area within the evidence file is later changed?

    A. EnCase detect the error if the evidence file is manually re-verified.

    B. All of the above.

    C. EnCase will detect the error when that area of the evidence file is accessed by the user.

    D. EnCase will allow the examiner to continue to access the rest of the evidence file that has not been changed.

Related Exams:

Tips on How to Prepare for the Exams

Nowadays, the certification exams become more and more important and required by more and more enterprises when applying for a job. But how to prepare for the exam effectively? How to prepare for the exam in a short time with less efforts? How to get a ideal result and how to find the most reliable resources? Here on Vcedump.com, you will find all the answers. Vcedump.com provide not only Guidance Software exam questions, answers and explanations but also complete assistance on your exam preparation and certification application. If you are confused on your GD0-110 exam preparations and Guidance Software certification application, do not hesitate to visit our Vcedump.com to find your solutions here.