Guidance Software GD0-110 - Certification Exam for EnCE Outside North America Exam
Page: 3 / 35
Total 174 questions
Question #11 (Topic: Topic 0)
A signature analysis has been run on a case. The result ?*JPEG ?in the signature column
means:
means:
A. The file signature is unknown and the file extension is JPEG.
B. The file signature is unknown and the header is a JPEG.
C. The file signature is a JPEG signature and the file extension is incorrect.
D. None of the above.
Answer: C
Question #12 (Topic: Topic 0)
By default, what color does EnCase use for slack?
A. Black
B. Red
C. Black on red
D. Red on black
Answer: B
Question #13 (Topic: Topic 0)
Bookmarks are stored in which of the following files?
A. The case file
B. The configuration Bookmarks.ini file
C. The evidence file
D. All of the above
Answer: A
Question #14 (Topic: Topic 0)
In hexadecimal notation, one byte is represented by _____ character(s).
A. 1
B. 2
C. 4
D. 8
Answer: B
Question #15 (Topic: Topic 0)
An evidence file can be moved to another directory without changing the file verification.
A. True
B. False
Answer: A
