Free GD0-100 Exam Braindumps
Certification Exam For ENCE North America Questions 71–75 (page: 16)

Updated On: 9-Feb-2026

Which of the following is found in the FileSignatures.ini configuration file

  1. The results of a hash analysis
  2. The information contained in the signature table
  3. The results of a signature analysis
  4. Pointers to an evidence file

Answer(s): B



During the power-up sequence, which of the following happens first?

  1. The boot sector is located on the hard drive.
  2. Theower On Self-Test.? 7KH ? RZHU2Q6HOI7HVW
  3. The floppy drive is checked for a diskette.
  4. The BIOS on an add-in card is executed.

Answer(s): B



A restored floppy diskette will have the same hash value as the original diskette.

  1. True
  2. False
  3. Answer not available.

Answer(s): C



A hard drive was imaged using EnCase. The original drive was placed into evidence. The restore feature was used to make a copy of the original hard drive. EnCase verifies the restored copy using:

  1. An MD5 hash
  2. A 32 bit CRC
  3. Nothing. Restored volumes are not verified.
  4. A running log

Answer(s): A



To later verify the contents of an evidence file 7RODWHUYHULI\WKHFRQWHQWVRIDQHYLGHQFHILOH

  1. EnCase writes a CRC value for every 64 sectors copied.
  2. EnCase writes a CRC value for every 128 sectors copied.
  3. EnCase writes an MD5 hash value every 64 sectors copied.
  4. EnCase writes an MD5 hash value for every 32 sectors copied.

Answer(s): A



Viewing page 16 of 37
Viewing questions 76 - 80 out of 176 questions


Post your Comments and Discuss Guidance Software GD0-100 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!