Summer Special 60% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: bestdeal

Free Guidance Software GD0-100 Practice Exam with Questions & Answers | Set: 3

Questions 21

When does the POST operation occur?

Options:
A.

When SCSI devices are configured.

B.

When Windows starts up.

C.

After a computer begins to boot from a device.

D.

When the power button to a computer is turnedon.

Guidance Software GD0-100 Premium Access
Questions 22

The case file should be archived with the evidence files at the termination of a case.

Options:
A.

True

B.

False

Questions 23

Assume that an evidence file is added to a case, the case is saved, and the case is closed. What happens if the evidence file is moved, and the case is then opened?

Options:
A.

EnCase reports that the file integrity has been compromised and renders the file useless. EnCase reports that the file integrity has been compromised and renders the file useless.

B.

EnCase opens the case, excluding the moved evidence.

C.

EnCase asks for the location of the evidence file the next time the case is opened.

D.

EnCase reports a different hash value for the evidence file.

Questions 24

EnCase can build a hash set of a selected group of files.

Options:
A.

True

B.

False

Questions 25

If cluster #3552 entry in the FAT table contains a value of ?? this would mean:

Options:
A.

The cluster is unallocated

B.

The cluster is the end of a file

C.

The cluster is allocated

D.

The cluster is marked bad

Questions 26

You are at an incident scene and determine that a computer contains evidence as described in the search warrant. When you seize the computer, you should:

Options:
A.

Record nothing to avoid inaccuracies that might jeopardize the use of the evidence.

B.

Record the location that the computer was recovered from.

C.

Record the identity of the person(s) involved in the seizure.

D.

Record the date and time the computer was seized.

Questions 27

Which of the following would most likely be an add-in card?

Options:
A.

A video card that is connected to the motherboard in the AGP slot

B.

Anything plugged into socket 7

C.

A motherboard

D.

The board that connects to the power supply

Questions 28

A personal data assistant was placed in a evidence locker until an examiner has time to examine it. Which of the following areas would require special attention?

Options:
A.

Chain-of-custody

B.

Storage

C.

There is no concern

D.

Cross-contamination

Questions 29

EnCase is able to read and examine which of the following file systems?

Options:
A.

NTFS

B.

EXT3

C.

FAT

D.

HFS

Questions 30

The EnCase case file can be best described as:

Options:
A.

The file that runs EnCase for Windows.

B.

A filecontain configuration settings for cases.

C.

None of the above.

D.

A file that contains information specific to one case.

Exam Code: GD0-100
Certification Provider: Guidance Software
Exam Name: Certification Exam For ENCE North America
Last Update: Jun 19, 2025
Questions: 176

Guidance Software Related Exams

How to pass Guidance Software GD0-110 - Certification Exam for EnCE Outside North America Exam
Guidance Software Free Access
Get Guidance Software Full Access

Guidance Software Free Exams
Guidance Software Free Exams
Access free Guidance Software exam study guides and practice tests at Examstrack. Ensure your success with top-notch preparation resources at Examstrack.