Guidance Software GD0-100 Online Practice Questions and Exam Preparation

Guidance Software GD0-100 Online Questions & Answers

• Question 151:

  A logical file would be best described as:

  A. The data taken from the starting cluster to the end of the last cluster that is occupied by the file.
  B. A file including any RAM and disk slack.
  C. A file including only RAM slack.
  D. The data from the beginning of the starting cluster to the length of the file.
  D. The data from the beginning of the starting cluster to the length of the file.

• Question 152:

  The EnCase case file can be best described as:

  A. The file that runs EnCase for Windows.
  B. A filecontain configuration settings for cases.
  C. None of the above.
  D. A file that contains information specific to one case.
  D. A file that contains information specific to one case.

• Question 153:

  A restored floppy diskette will have the same hash value as the original diskette.

  A. True
  B. False
  A. True

• Question 154:

  How are the results of a signature analysis examined?

  A. By sorting on the category column in the Table view. By sorting on the category column in the Table view.
  B. By sorting on the signature column in the Table view. By sorting on the signature column in the Table view.
  C. By sorting on the hash sets column in the Table view. By sorting on the hash sets column in the Table view.
  D. By sorting on the hash library column in the Table view. By sorting on the hash library column in the Table view.
  B. By sorting on the signature column in the Table view. By sorting on the signature column in the Table view.

• Question 155:

  Which of the following would most likely be an add-in card?

  A. A video card that is connected to the motherboard in the AGP slot
  B. Anything plugged into socket 7
  C. A motherboard
  D. The board that connects to the power supply
  A. A video card that is connected to the motherboard in the AGP slot

• Question 156:

  How many partitions can be found in the boot partition table found at the beginning of the drive?

  A. 8
  B. 4
  C. 6 D. 2
  B. 4

• Question 157:

  If cases are worked on a lab drive in a secure room, without any cleaning of the contents of the drive, which of the following areas would be of most concern?

  A. There is no concern
  B. Cross-contamination
  C. Chain-of-custody
  D. Storage
  B. Cross-contamination

• Question 158:

  How many copies of the FAT are located on a FAT 32, Windows 98-formatted partition?

  A. 2
  B. 3
  C. 1
  D. 4
  A. 2

• Question 159:

  Which of the following items could contain digital evidence?

  A. Credit card readers
  B. Personal assistant devices
  C. Cellular phones
  D. Digital cameras
  A. Credit card readers
  B. Personal assistant devices
  C. Cellular phones
  D. Digital cameras

• Question 160:

  Which of the following directories contain the information that is found on a Windows 98 Desktop?

  A. C:\Program files\Programs\Desktop
  B. C:\Desktop
  C. C:\Startup\Desktop\Items D. C:\Windows\Desktop
  D