Certification Exam For ENCE North America (GD0-100) Free Practice Test

Question 1

The following GREP expression was typed in exactly as shown. Choose the Answer:(s) that would result. Jan 1 st , 2?0?00

A. Jan 1st , 1900

B. Jan 1st , 2001

C. Jan 1st , 2100

D. Jan 1st , 2000

Correct Answer: D

Question 2

An EnCase evidence file of a hard drive ________ be restored to another hard drive of equal or greater size.

A. cannot

B. can

Correct Answer: B

Question 3

Select the appropriate name for the highlighted area of the binary numbers.

A. Dword

B. Nibble

C. Word

D. Bit

E. Byte

Correct Answer: C

Question 4

The EnCase signature analysis is used to perform which of the following actions?

A. Analyzing the relationship of a file signature to its file extension.Analyzing the relationship of a file signature to its file extension.

B. Analyzing the relationship of a file signature to a list of hash sets.Analyzing the relationship of a file signature to a list of hash sets.

C. Analyzing the relationship of a file signature to its file header.Analyzing the relationship of a file signature to its file header.

D. Analyzing the relationship of a file signature to its computed MD5 hash value.Analyzing the relationship of a file signature to its computed MD5 hash value.

Correct Answer: A

Question 5

Bookmarks are stored in which of the following files?

A. The evidence file

B. The configuration Bookmarks.ini file

C. All of the above

D. The case file

Correct Answer: D

Question 6

Select the appropriate name for the highlighted area of the binary numbers.

A. Dword

B. Nibble

C. Word

D. Bit

E. Byte

Correct Answer: E

Question 7

A signature analysis has been run on a case. The result ?*JPEG ?in the signature column

A. The file signature is a JPEG signature and the file extension is incorrect.

B. The file signature is unknown and the file extension is JPEG.

C. None of the above.

D. The file signature is unknown and the header is a JPEG.

Correct Answer: A

Question 8

Select the appropriate name for the highlighted area of the binary numbers.

A. Dword

B. Nibble

C. Word

D. Bit

E. Byte

Correct Answer: D

Question 9

To generate an MD5 hash value for a file, EnCase

A. Computes the hash value including the logical file and filename.

B. Computes the hash value based on the physical file.

C. Computes the hash value including the physical file and filename.

D. Computes the hash value based on the logical file.

Correct Answer: D

Question 10

How many clusters can a FAT 16 system address?

A. 268,435,456

B. 4,294,967,296

C. 65,536

D. 4,096

Correct Answer: C

Welcome to TestSimulate

Guidance Software Certification Exam For ENCE North America (GD0-100) Free Practice Test