Free GD0-100 Exam Braindumps
Certification Exam For ENCE North America Questions 36–40 (page: 9)

Updated On: 9-Feb-2026

What files are reconfigured or deleted by EnCase during the creation of an EnCase boot disk?

  1. command.com
  2. autoexec.bat
  3. drvspace.bin
  4. io.sys

Answer(s): A,C,D



A signature analysis has been run on a case. The result ?*JPEG ?in the signature column means:

  1. The file signature is unknown and the header is a JPEG.
  2. The file signature is a JPEG signature and the file extension is incorrect.
  3. The file signature is unknown and the file extension is JPEG.
  4. None of the above.

Answer(s): B



The following GREP expression was typed in exactly as shown. Choose the answer(s) that would result.[\x00-\x05]\x00\x00?>[?[@?[?[?[

  1. FF 0000 00 00 FF BA
  2. 0000 00 01 FF FF BA
  3. 04 06 0000 00 FF FF BA
  4. 04 0000 00 FF FF BA

Answer(s): D



Which of the following items could contain digital evidence?

  1. Credit card readers
  2. Personal assistant devices
  3. Cellular phones
  4. Digital cameras

Answer(s): A,B,C,D



What information in a FAT file system directory entry refers to the location of a file on the hard drive?

  1. The file size
  2. The file attributes
  3. The starting cluster
  4. The fragmentation settings

Answer(s): C



Viewing page 9 of 37
Viewing questions 41 - 45 out of 176 questions


Post your Comments and Discuss Guidance Software GD0-100 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!