|
Braindumps
of GD0-110
Certification Exam for EnCE Outside North America
Exam Questions,
Answers, Braindumps (GD0-110)
Hi to all
and thanks to www.exams.ws and www.4exam.com But there’s
no need to have it from both of them, only questions
from only one are sufficient I think. Here is my contribution.
QUESTION 1
When an EnCase user double-clicks on a file within
EnCase what determines the action that will result?
Select all that apply
A. The settings in the case file.
B. The settings in the FileTypes.ini file.
C. The setting in the evidence file.
Answer: B
QUESTION 2
Search results are found in which of the following
files? Select all that apply.
A. The evidence file
B. The configuration Searches.ini file
C. The case file
Answer: C
QUESTION 3
If cluster #3552 entry in the FAT table contains a
value of ?? this would mean:
A. The cluster is unallocated
B. The cluster is the end of a file
C. The cluster is allocated
D. The cluster is marked bad
Answer: A
QUESTION 4
The following GREP expression was typed in exactly
as shown. Choose the answer(s) that would result.
Bob@[a-z]+.com
A. Bob@New zealand.com
B. Bob@My-Email.com
C. Bob@America.com
D. Bob@a-z.com
Answer: C
QUESTION 5
You are an investigator and have encountered a computer
that is running at the home of a suspect. The computer
does not appear to be a part of a network. The operating
system is Windows XP Home. No programs are visibly
running. You should:
A. Pull the plug from the back of the computer.
B. Turn it off with the power button.
C. Pull the plug from the wall.
D. Shut it down with the start menu.
Answer: A
QUESTION 6
A physical file size is:
A. The total size in sectors of an allocated file.
B. The total size of all the clusters used by the
file measured in bytes.
C. The total size in bytes of a logical file.
D. The total size of the file including the ram slack
in bytes.
Answer: B
GD0-110
|
