Month End Special 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: sale65best

Ace the Guidance Software GD0-110 Exam: Ultimate Preparation Guide

Questions 1

A case file can contain ____ hard drive images?

Options:
A.

1

B.

5

C.

10

D.

any number of

Guidance Software GD0-110 Premium Access
Questions 2

When can an evidence file containing a NTFS partition be logically restored to a FAT 32 partition?

Options:
A.

When the FAT 32 is the same size or bigger.

B.

When the FAT 32 has the same number of sectors / clusters.

C.

Never

D.

Both a and b

Questions 3

How does EnCase verify that the case information (Case Number, Evidence Number, Investigator Name, etc) in an evidence file has not been damaged or changed, after the evidence file has been written?

Options:
A.

The .case file writes a CRC value for the case information and verifies it when the case is opened.

B.

EnCase does not verify the case information and case information can be changed by the user as it becomes necessary.

C.

EnCase writes a CRC value of the case information and verifies the CRC value when the evidence is added to a case.

D.

EnCase writes an MD5 hash value for the entire evidence file, which includes the case information, and verifies the MD5 hash when the evidence is added to a case.

Questions 4

In hexadecimal notation, one byte is represented by _____ character(s).

Options:
A.

1

B.

2

C.

4

D.

8

Questions 5

How many copies of the FAT are located on a FAT 32, Windows 98-formatted partition?

Options:
A.

1

B.

2

C.

3

D.

4

Questions 6

Which of the following would most likely be an add-in card?

Options:
A.

A motherboard

B.

The board that connects to the power supply

C.

A video card that is connected to the motherboard in the AGP slot

D.

Anything plugged into socket 7

Questions 7

If cases are worked on a lab drive in a secure room, without any cleaning of the contents of the drive, which of the following areas would be of most concern?

Options:
A.

Cross-contamination

B.

Storage

C.

Chain-of-custody

D.

There is no concern

Questions 8

A SCSI host adapter would most likely perform which of the following tasks?

Options:
A.

Make SCSI hard drives and other SCSI devices accessible to the operating system.

B.

Configure the motherboard settings to the BIOS.

C.

Set up the connection of IDE hard drives.

D.

None of the above.

Questions 9

Within EnCase, clicking on save on the toolbar affects what file(s)?

Options:
A.

The open case file

B.

The configuration .ini files

C.

The evidence files

D.

All of the above

Questions 10

To undelete a file in the FAT file system, EnCase computes the number of _______ the file will use based on the file ______.

Options:
A.

Clusters; starting extent

B.

Sectors; starting extent

C.

Sectors; file size

D.

Clusters; file size

Exam Code: GD0-110
Certification Provider: Guidance Software
Exam Name: Certification Exam for EnCE Outside North America
Last Update: Jan 24, 2025
Questions: 174

Guidance Software Related Exams

How to pass Guidance Software GD0-100 - Certification Exam For ENCE North America Exam
Guidance Software Free Access
Get Guidance Software Full Access

Guidance Software Free Exams
Guidance Software Free Exams
Access free Guidance Software exam study guides and practice tests at Examstrack. Ensure your success with top-notch preparation resources at Examstrack.