Summer Special 60% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: bestdeal

Ace the Guidance Software GD0-110 Exam: Ultimate Preparation Guide

Questions 1

A case file can contain ____ hard drive images?

Options:

A.

1

B.

5

C.

10

D.

any number of

Buy Now
Questions 2

When can an evidence file containing a NTFS partition be logically restored to a FAT 32 partition?

Options:

A.

When the FAT 32 is the same size or bigger.

B.

When the FAT 32 has the same number of sectors / clusters.

C.

Never

D.

Both a and b

Buy Now
Questions 3

How does EnCase verify that the case information (Case Number, Evidence Number, Investigator Name, etc) in an evidence file has not been damaged or changed, after the evidence file has been written?

Options:

A.

The .case file writes a CRC value for the case information and verifies it when the case is opened.

B.

EnCase does not verify the case information and case information can be changed by the user as it becomes necessary.

C.

EnCase writes a CRC value of the case information and verifies the CRC value when the evidence is added to a case.

D.

EnCase writes an MD5 hash value for the entire evidence file, which includes the case information, and verifies the MD5 hash when the evidence is added to a case.

Buy Now
Questions 4

In hexadecimal notation, one byte is represented by _____ character(s).

Options:

A.

1

B.

2

C.

4

D.

8

Buy Now
Questions 5

How many copies of the FAT are located on a FAT 32, Windows 98-formatted partition?

Options:

A.

1

B.

2

C.

3

D.

4

Buy Now
Questions 6

Which of the following would most likely be an add-in card?

Options:

A.

A motherboard

B.

The board that connects to the power supply

C.

A video card that is connected to the motherboard in the AGP slot

D.

Anything plugged into socket 7

Buy Now
Questions 7

If cases are worked on a lab drive in a secure room, without any cleaning of the contents of the drive, which of the following areas would be of most concern?

Options:

A.

Cross-contamination

B.

Storage

C.

Chain-of-custody

D.

There is no concern

Buy Now
Questions 8

A SCSI host adapter would most likely perform which of the following tasks?

Options:

A.

Make SCSI hard drives and other SCSI devices accessible to the operating system.

B.

Configure the motherboard settings to the BIOS.

C.

Set up the connection of IDE hard drives.

D.

None of the above.

Buy Now
Questions 9

Within EnCase, clicking on save on the toolbar affects what file(s)?

Options:

A.

The open case file

B.

The configuration .ini files

C.

The evidence files

D.

All of the above

Buy Now
Questions 10

To undelete a file in the FAT file system, EnCase computes the number of _______ the file will use based on the file ______.

Options:

A.

Clusters; starting extent

B.

Sectors; starting extent

C.

Sectors; file size

D.

Clusters; file size

Buy Now
Exam Code: GD0-110
Exam Name: Certification Exam for EnCE Outside North America
Last Update: Jun 20, 2024
Questions: 174

PDF + Testing Engine

$159.99
$64

Testing Engine

$119.99
$48

PDF (Q&A)

$99.99
$40