최신Guidance Software Certification Exam for EnCE Outside North America - GD0-110무료샘플문제
문제1
Within EnCase, you highlight a range of data within a file. The length indicator displays the value
30. How many bytes have you actually selected?
Within EnCase, you highlight a range of data within a file. The length indicator displays the value
30. How many bytes have you actually selected?
정답: D
문제2
The maximum file segment size for an EnCase evidence file is:
The maximum file segment size for an EnCase evidence file is:
정답: A
문제3
Which of the following aspects of the EnCase evidence file can be changed during a reacquire of the evidence file?
Which of the following aspects of the EnCase evidence file can be changed during a reacquire of the evidence file?
정답: C
문제4
CORRECT TEXT
GREP terms are automatically recognized as GREP by EnCase.
CORRECT TEXT
GREP terms are automatically recognized as GREP by EnCase.
정답: B
문제5
Search results are found in which of the following files?
Search results are found in which of the following files?
정답: A
문제6
To undelete a file in the FAT file system, EnCase obtains the starting extent from the:
To undelete a file in the FAT file system, EnCase obtains the starting extent from the:
정답: A
문제7
CORRECT TEXT
Calls to the C:\ volume of the hard drive are not made by DOS when a computer is booted with a standard DOS 6.22 boot disk.
CORRECT TEXT
Calls to the C:\ volume of the hard drive are not made by DOS when a computer is booted with a standard DOS 6.22 boot disk.
정답: B
문제8
Within EnCase, clicking on ave?on the toolbar affects what file(s)? Within EnCase, clicking on ?ave?on the toolbar affects what file(s)?
Within EnCase, clicking on ave?on the toolbar affects what file(s)? Within EnCase, clicking on ?ave?on the toolbar affects what file(s)?
정답: B
문제9
CORRECT TEXT
The temporary folder of a case cannot be changed once it has been set.
CORRECT TEXT
The temporary folder of a case cannot be changed once it has been set.
정답: B
문제10
If an evidence file has been added to a case and completely verified, what happens if the data area within the evidence file is later changed?
If an evidence file has been added to a case and completely verified, what happens if the data area within the evidence file is later changed?
정답: A
문제11
By default, EnCase will display the data from the end of a logical file, to the end of the cluster, in what color:
By default, EnCase will display the data from the end of a logical file, to the end of the cluster, in what color:
정답: D
문제12
You are conducting an investigation and have encountered a computer that is running in the field. The operating system is Windows XP. A software program is currently running and is visible on the screen. You should:
You are conducting an investigation and have encountered a computer that is running in the field. The operating system is Windows XP. A software program is currently running and is visible on the screen. You should:
정답: C
문제13
The following keyword was typed in exactly as shown. Choose the answer(s) that would result. All search criteria have default settings. Tom Jones
The following keyword was typed in exactly as shown. Choose the answer(s) that would result. All search criteria have default settings. Tom Jones
정답: C,D
문제14
In Windows 2000 and XP, which of the following directories contain user personal folders? In Windows 2000 and XP, which of the following directories contain user? personal folders?
In Windows 2000 and XP, which of the following directories contain user personal folders? In Windows 2000 and XP, which of the following directories contain user? personal folders?
정답: D
문제15
In the EnCase environment, the term xternal viewers?is best described as: In the EnCase environment, the term ?xternal viewers?is best described as:
In the EnCase environment, the term xternal viewers?is best described as: In the EnCase environment, the term ?xternal viewers?is best described as:
정답: D