Guidance Software GD0-100 Online Practice Questions and Exam Preparation

Guidance Software GD0-100 Online Questions & Answers

• Question 171:

  Which statement would most accurately describe a motherboard?

  A. An add-in card that handles allRAM.
  B. Any circuit board, regardless of its function.
  C. The main circuit board that has slots for the microprocessor, RAM, ROM, and add-in cards.
  D. An add-in card that controls all hard drive activity.
  C. The main circuit board that has slots for the microprocessor, RAM, ROM, and add-in cards.

• Question 172:

  Before utilizing an analysis technique on computer evidence, the investigator should:

  A. Test the technique on simulated evidence in a controlled environment to confirm that the results are consistent.
  B. Be trained in the employment of the technique.
  C. Botha and b.
  D. Neithera or b.
  C. Botha and b.

• Question 173:

  This question addresses the EnCase for Windows search process. If a target word is within a logical file, and it begins in cluster 10 and ends in cluster 15 (the word is fragmented), the search:

  A. Will not find it unlessile slack is checked on the search dialog box.
  B. Will find it because EnCase performs a logical search.
  C. Will not find it because EnCase performs a physical search only.
  D. Will not find it because the letters of the keyword are not contiguous.
  B. Will find it because EnCase performs a logical search.

• Question 174:

  In Unicode, one printed character is composed of ____ bytes of data.

  A. 8
  B. 4
  C. 2
  D. 1
  C. 2

• Question 175:

  When a file is deleted in the FAT file system, what happens to the filename?

  A. It is zeroed out.
  B. The first character of the directory entry is marked with a hex 00.
  C. It is wiped from the directory.
  D. The first character of the directory entry is marked with a hex E5.
  D. The first character of the directory entry is marked with a hex E5.

• Question 176:

  The Unicode system can address ____ characters?

  A. 65,536
  B. 16,384
  C. 256
  D. 1024
  A. 65,536

• Question 177:

  Within EnCase, what is the purpose of the temp folder?

  A. This is the folder used to hold copies of files that are sent to external viewers.
  B. This is the folder that will automatically store an evidence file when the acquisition is made in DOS.
  C. This is the folder that temporarily stores all bookmark and search results.
  D. This is the folder that will be automatically selected when the copy/unerase feature is used. This is the folder that will be automatically selected when the copy/unerase feature is used.
  A. This is the folder used to hold copies of files that are sent to external viewers.

• Question 178:

  Which of the following would be a true statement about the function of the BIOS?

  A. Botha and c.
  B. The BIOS integrates compressed executable files with memory addresses for faster execution.
  C. The BIOS is responsible for checking and configuring the system after the power is turned on.
  D. The BIOS is responsible for swapping out memory pages when RAM fills up.
  C. The BIOS is responsible for checking and configuring the system after the power is turned on.

• Question 179:

  ROM is an acronym for:

  A. Read Open Memory
  B. Random Open Memory
  C. Read Only Memory
  D. Relative Open Memory
  C. Read Only Memory

• Question 180:

  The following GREP expression was typed in exactly as shown. Choose the answer(s) that would result. 800[) \-]+555-1212

  A. (800) 555-1212
  B. 800-555 1212
  C. 8005551212
  D. 800.555.1212
  A. (800) 555-1212