Free Cheat-test Samples and Demo Questions Download
Adobe exams Adobe
Apple exams Apple
Avaya exams Avaya
Check Point exams Check Point
Cisco exams Cisco
Citrix exams Citrix
CIW exams CIW
CompTIA exams CompTIA
EC-Council exams EC-Council
EMC exams EMC
Exin exams Exin
Fortinet exams Fortinet
Hitachi exams Hitachi
HP exams HP
IBM exams IBM
Isaca exams Isaca
ISC exams ISC
Juniper exams Juniper
LPI exams LPI
McAfee exams McAfee
Microsoft exams Microsoft
Oracle exams Oracle
PMI exams PMI
Riverbed exams Riverbed
SNIA exams SAP
Sun exams SAS
Symantec exams Symantec
VMware exams VMware
All certification exams

Guidance Software GD0-110 Exam -

Free GD0-110 Sample Questions:

Q: 1 A sector on a hard drive contains how many bytes?
A. 512
B. 1024
C. 2048
D. 4096
Answer: A

Q: 2 In the EnCase environment, the term xternal viewers?is best described as: In the EnCase environment, the term ?xternal viewers?is best described as:
A. Programs that are exported out of an evidence file.
B. Programs that are associated with EnCase to open specific file types.
C. Any program that is loaded on the lab hard drive.
D. Any program that will work with EnCase.
Answer: B

Q: 3 A hard drive was imaged using EnCase. The original drive was placed into evidence. The restore feature was used to make a copy of the original hard drive. EnCase verifies the restored copy using:
A. An MD5 hash
B. A 32 bit CRC
C. A running log
D. Nothing. Restored volumes are not verified.
Answer: A

Q: 4 Within EnCase, clicking on ave?on the toolbar affects what file(s)? Within EnCase, clicking on ?ave?on the toolbar affects what file(s)?
A. The open case file
B. The configuration .ini files
C. The evidence files
D. All of the above
Answer: A

Q: 5 The following GREP expression was typed in exactly as shown. Choose the answer(s) that would result. Jan 1 st , 2?0?00
A. Jan 1 st , 1900
B. Jan 1 st , 2000
C. Jan 1 st , 2001
D. Jan 1 st , 2100
Answer: B

Q: 6 How many partitions can be found in the boot partition table found at the beginning of the drive?
A. 2
B. 4
C. 6
D. 8
Answer: B

Q: 7 The EnCase default export folder is:
A. A global setting that can be changed.
B. A case-specific setting that can be changed.
C. A global setting that cannot be changed.
D. A case-specific setting that cannot be changed.
Answer: B

Q: 8 An evidence file can be moved to another directory without changing the file verification. True or False
Answer: Pending

Q: 9 When can an evidence file containing a NTFS partition be logically restored to a FAT 32 partition?
A. When the FAT 32 is the same size or bigger.
B. When the FAT 32 has the same number of sectors / clusters.
C. Never
D. Both a and b
Answer: C

Q: 10 The FAT in the File Allocation Table file system keeps track of:
A. File fragmentation
B. Every addressable cluster on the partition
C. Clusters marked as bad
D. All of the above.
Answer: D

© 2014, All Rights Reserved