QUESTION: 69

When a non-compressed evidence file is reacquired with compression, the acquisition and verification hash values for the evidence will remain the same for both files.

True
False
Answer not available.

Answer(s): C

Reveal Solution Next Question

QUESTION: 70

To generate an MD5 hash value for a file, EnCase:

Computes the hash value including the logical file and filename.
Computes the hash value including the physical file and filename.
Computes the hash value based on the logical file.
Computes the hash value based on the physical file.

Answer(s): C

Reveal Solution Next Question

QUESTION: 71

Which of the following is found in the FileSignatures.ini configuration file

The results of a hash analysis
The information contained in the signature table
The results of a signature analysis
Pointers to an evidence file

Answer(s): B

Reveal Solution Next Question

QUESTION: 72

During the power-up sequence, which of the following happens first?

The boot sector is located on the hard drive.
Theower On Self-Test.? 7KH ? RZHU2Q6HOI7HVW
The floppy drive is checked for a diskette.
The BIOS on an add-in card is executed.

Answer(s): B

Reveal Solution Next Question

Free GD0-100 Exam Braindumps (page: 18)

QUESTION: 69

QUESTION: 70

QUESTION: 71

QUESTION: 72