Free GD0-100 Exam Braindumps (page: 5)

Page 5 of 45

Hash libraries are commonly used to:

  1. Compare a file header to a file extension.
  2. Identify files that are already known to the user.
  3. Compare one hash set with another hash set.
  4. Verify the evidence file.

Answer(s): B



Which is the proper formula for determining the size in bytes of a hard drive that uses cylinders (C), heads (H), and sectors (S) geometry?

  1. C X H + S
  2. C X H X S + 512
  3. C X H X S X 512
  4. C X H X S

Answer(s): C



Within EnCase, clicking on Save on the toolbar affects what file(s)?

  1. All of the above
  2. The evidence files
  3. The open case file
  4. The configuration .ini files

Answer(s): C



EnCase uses the _________________ to conduct a signature analysis.

  1. Both a and b
  2. file signature table
  3. hash library
  4. file Viewers

Answer(s): B






Post your Comments and Discuss Guidance Software GD0-100 exam with other Community members:

GD0-100 Exam Discussions & Posts