Winter Sale Special Limited Time 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: v4s65

GD0-100 Exam Dumps - Certification Exam For ENCE North America

Go to page:
Question # 17

When Unicode is selected for a search keyword, EnCase:

A.

Will find the keyword if it is either Unicode or ASCII.

B.

Unicode is not a search option for EnCase.

C.

Will only find the keyword if it is Unicode.

D.

None of the above.

Full Access
Question # 18

A signature analysis has been run on a case. The result ?*JPEG ?in the signature column means:

A.

The file signature is unknown and the header is a JPEG.

B.

The file signature is a JPEG signature and the file extension is incorrect.

C.

The file signature is unknown and the file extension is JPEG.

D.

None of the above.

Full Access
Question # 19

A case file can contain ____ hard drive images?

A.

5

B.

1

C.

any number of

D.

10

Full Access
Question # 20

To generate an MD5 hash value for a file, EnCase:

A.

Computes the hash value including the logical file and filename.

B.

Computes the hash value including the physical file and filename.

C.

Computes the hash value based on the logical file.

D.

Computes the hash value based on the physical file.

Full Access
Question # 21

The EnCase methodology dictates that ________ be created prior to acquiring evidence.

A.

a unique directory on the lab drive for case management

B.

a text file for notes

C.

All of the above

D.

an .E01 file on the lab drive

Full Access
Question # 22

Select the appropriate name for the highlighted area of the binary numbers.

A.

Word

B.

Byte

C.

Bit

D.

Nibble

E.

Dword

Full Access
Question # 23

When a document is printed using EMF in Windows, what file(s) are generated in the spooling process?

A.

The .SHD file

B.

The .SPL file

C.

Neither a or b

D.

Both a and b

Full Access
Question # 24

ROM is an acronym for:

A.

Read Open Memory

B.

Random Open Memory

C.

Read Only Memory

D.

Relative Open Memory

Full Access
Go to page: