최신Guidance Software Certification Exam for EnCE Outside North America - GD0-110무료샘플문제
문제1
The EnCase evidence file is best described as:
The EnCase evidence file is best described as:
정답: A
문제2
Which of the following is commonly used to encode e-mail attachments?
Which of the following is commonly used to encode e-mail attachments?
정답: B
문제3
CORRECT TEXT
Searches and bookmarks are stored in the evidence file.
CORRECT TEXT
Searches and bookmarks are stored in the evidence file.
정답: A
문제4
정답:
You are investigating a case involving fraud. You seized a computer from a suspect who stated that the computer is not used by anyone other than himself. The computer has Windows 98 installed on the hard drive. You find the filename :\downloads\check01.jpg?that EnCase shows as being moved. The starting extent is 0C4057. You find another filename ?:\downloads\check01.jpg?that EnCase shows as being moved. The starting extent is 0C4057. You find another filename :\downloads\chk1.dll?with the starting extent 0C4057, which EnCase also shows as being moved. In the :\Windows\System? ? ?GRZQORDGV?FKNGOO"ZLWKWKHVWDUWLQJH[WHQW&
문제5
An EnCase evidence file of a hard drive ________ be restored to another hard drive of equal or greater size.
An EnCase evidence file of a hard drive ________ be restored to another hard drive of equal or greater size.
정답: A
문제6
The term ignature?and eader?as they relate to a signature analysis are: The term ?ignature?and ?eader?as they relate to a signature analysis are:
The term ignature?and eader?as they relate to a signature analysis are: The term ?ignature?and ?eader?as they relate to a signature analysis are:
정답: D
문제7
An Enhanced Metafile would best be described as:
An Enhanced Metafile would best be described as:
정답: D
문제8
When a file is deleted in the FAT or NTFS file systems, what happens to the data on the hard drive?
When a file is deleted in the FAT or NTFS file systems, what happens to the data on the hard drive?
정답: D
문제9
How does EnCase verify that the evidence file contains an exact copy of the suspect hard drive? How does EnCase verify that the evidence file contains an exact copy of the suspect? hard drive?
How does EnCase verify that the evidence file contains an exact copy of the suspect hard drive? How does EnCase verify that the evidence file contains an exact copy of the suspect? hard drive?
정답: A
문제10
Which of the following items could contain digital evidence?
Which of the following items could contain digital evidence?
정답: A,B,C,D
문제11
The Unicode system can address ____ characters?
The Unicode system can address ____ characters?
정답: A
문제12
CORRECT TEXT
When a drive letter is assigned to a logical volume, that information is temporarily written the volume boot record on the hard drive.
CORRECT TEXT
When a drive letter is assigned to a logical volume, that information is temporarily written the volume boot record on the hard drive.
정답: A
문제13
CORRECT TEXT
A standard Windows 98 boot disk is acceptable for booting a suspect drive.
CORRECT TEXT
A standard Windows 98 boot disk is acceptable for booting a suspect drive.
정답: A