Guidance Software GD0-100 Online Practice Questions and Exam Preparation

Guidance Software GD0-100 Online Questions & Answers

• Question 61:

  When an EnCase user double-clicks on a valid .jpg file, that file is:

  A. Copied to the default export folder and opened by an associated program.
  B. Renamed to JPG_0001.jpg and copied to the default export folder.
  C. Copied to the EnCase specified temp folder and opened by an associated program.
  D. Opened by EnCase.
  C. Copied to the EnCase specified temp folder and opened by an associated program.

• Question 62:

  EnCase can build a hash set of a selected group of files.

  A. True
  B. False
  A. True

• Question 63:

  Select the appropriate name for the highlighted area of the binary numbers.

  A. Word
  B. Byte
  C. Bit
  D. Nibble
  E. Dword
  B. Byte

• Question 64:

  EnCase marks a file as overwritten when _____________ has been allocated to another file.

  A. all of the file
  B. the starting cluster of the file
  C. the directory entry for the file
  D. any part of the file
  B. the starting cluster of the file

• Question 65:

  What are the EnCase configuration .ini files used for?

  A. Storing information that will be available to EnCase each time it is opened, regardless of the active case(s).
  B. Storing the results of a signature analysis.
  C. Storing information that is specific to a particular case.
  D. Storing pointers to acquired evidence.
  A. Storing information that will be available to EnCase each time it is opened, regardless of the active case(s).

• Question 66:

  When a document is printed using EMF in Windows, what file(s) are generated in the spooling process?

  A. The .SHD file
  B. The .SPL file
  C. Neither a or b
  D. Both a and b
  D. Both a and b

• Question 67:

  The following keyword was typed in exactly as shown. Choose the answer(s) that would result. All search criteria have default settings. credit card

  A. Card
  B. Credit Card
  C. credit card
  D. Credit
  B. Credit Card
  C. credit card

• Question 68:

  When an EnCase user double-clicks on a file within EnCase what determines the action that will result? Select all that apply

  A. The settings in the case file.
  B. The settings in the FileTypes.ini file.
  C. The setting in the evidence file.
  B. The settings in the FileTypes.ini file.

• Question 69:

  A sector on a floppy disk is the same size as a sector on a NTFS formatted hard drive.

  A. False
  B. True
  B. True

• Question 70:

  Search terms are case sensitive by default.

  A. False
  B. True
  A. False