Guidance Software GD0-100 Exam
Certification Exam For ENCE North America (Page 12 )

Updated On: 1-Feb-2026

You are at an incident scene and determine that a computer contains evidence as described in the search warrant. When you seize the computer, you should:

  1. Record nothing to avoid inaccuracies that might jeopardize the use of the evidence.
  2. Record the location that the computer was recovered from.
  3. Record the identity of the person(s) involved in the seizure.
  4. Record the date and time the computer was seized.

Answer(s): B,C,D



How many partitions can be found in the boot partition table found at the beginning of the drive?

  1. 8
  2. 4
  3. 6
  4. 2

Answer(s): B



Within EnCase, you highlight a range of data within a file. The length indicator displays the value 30. How many bytes have you actually selected?

  1. 30
  2. 3
  3. 60
  4. 15

Answer(s): A



Which of the following would most likely be an add-in card?

  1. A video card that is connected to the motherboard in the AGP slot
  2. Anything plugged into socket 7
  3. A motherboard
  4. The board that connects to the power supply

Answer(s): A



The Windows 98 Start Menu has a selection called documents which displays a list of recently used files. Which of the following The Windows 98 Start Menu has a selection called documents which displays a list of recently used files. Which of the following folders contain those files?

  1. C:\Windows\History
  2. C:\Windows\Start menu\Documents
  3. C:\Windows\Documents
  4. C:\Windows\Recent

Answer(s): D



Viewing page 12 of 37
Viewing questions 56 - 60 out of 176 questions



Post your Comments and Discuss Guidance Software GD0-100 exam prep with other Community members:

Join the GD0-100 Discussion