New Year Special Sale Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: scxmas70

GD0-110 Exam Dumps - Certification Exam for EnCE Outside North America

Go to page:
Question # 9

An EnCase evidence file of a hard drive ________ be restored to another hard drive of equal or greater size.

A.

can

B.

cannot

Full Access
Question # 10

How many partitions can be found in the boot partition table found at the beginning of the drive?

A.

2

B.

4

C.

6

D.

8

Full Access
Question # 11

The boot partition table found at the beginning of a hard drive is located in what sector?

A.

Volume boot record

B.

Master boot record

C.

Master file table

D.

Volume boot sector

Full Access
Question # 12

Assume that MyNote.txt has been deleted. The FAT file system directory entry for that file has been overwritten. The data for MyNote.txt is now:

A.

Allocated

B.

Overwritten

C.

Unallocated

D.

Cross-linked

Full Access
Question # 13

RAM is used by the computer to:

A.

Permanently store electronic data.

B.

Execute the POST during start-up.

C.

Temporarily store electronic data that is being processed.

D.

Establish a connection with external devices.

Full Access
Question # 14

An evidence file can be moved to another directory without changing the file verification.

A.

True

B.

False

Full Access
Question # 15

What files are reconfigured or deleted by EnCase during the creation of an EnCase boot disk?

A.

command.com

B.

io.sys

C.

drvspace.bin

D.

autoexec.bat

Full Access
Question # 16

A FAT directory has as a logical size of:

A.

0 bytes

B.

64 bytes

C.

128 bytes

D.

One cluster

Full Access
Go to page: