QUESTION: 41

What files are reconfigured or deleted by EnCase during the creation of an EnCase boot disk?

command.com
io.sys
autoexec.bat
drvspace.bin

Answer(s): A,B,D

Consider the following path in a FAT file system: C:\My Documents\My Pictures\Bikes. Where does the directory ikes?receive its Consider the following path in a FAT file system: C:\My Documents\My Pictures\Bikes. Where does the directory ?ikes?receive its name?

From the root directory c:\
From itself
From the My Pictures directory
From the My Documents directory

Answer(s): C

Reveal Solution Next Question

QUESTION: 43

Will EnCase allow a user to write data into an acquired evidence file?

No. Data cannot be added to the evidence file after the acquisition is made.
Yes, but only bookmarks.
Yes, but only case information.
No, unless the user established a writing privilege when the evidence was acquired.
Yes, but only to resize the partitions.

Answer(s): A

Reveal Solution Next Question

QUESTION: 44

Within EnCase, what is purpose of the default export folder?

This is the folder used to hold copies of files that are sent to external viewers.
This is the folder that will automatically store an evidence file when the acquisition is made in DOS.
This is the folder that will be automatically selected when the copy/unerase feature is used.
This is the folder that temporarily stores all bookmark and search results.

Answer(s): C

Reveal Solution Next Question

Free GD0-110 Exam Braindumps (page: 11)

QUESTION: 41

QUESTION: 42

QUESTION: 43

QUESTION: 44