QUESTION: 45

What information should be obtained from the BIOS during computer forensic investigations?

The date and time
The video caching information
The port assigned to the serial port
The boot sequence

Answer(s): A,D

QUESTION: 46

In DOS acquisition mode, if a physical drive is detected, but no partition information is displayed, what would be the cause:

Neither a or b
Both a and b
There are no partitions present.
The partition scheme is not recognized by DOS.

Answer(s): B

Reveal Solution Next Question

A suspect typed a file on his computer and saved it to a floppy diskette. The filename was MyNote.txt. You receive the floppy and the suspect computer. The suspect denies that the floppy disk belongs to him. You search the suspect computer and locate only the suspect? computer. The suspect denies that the floppy disk belongs to him. You search the suspect? computer and locate only the filename within a .LNK file. The .LNK file is located in the folder C:\Windows\Recent. How you would use the .LNK file to establish a connection between the file on the floppy diskette and the suspect computer? connection between the file on the floppy diskette and the suspect? computer?

The file signature found in the .LNK file
The dates and time of the file found in the .LNK file, at file offset 28
Both a and b
The full path of the file, found in the .LNK file

Answer(s): C

Reveal Solution Next Question

QUESTION: 48

Select the appropriate name for the highlighted area of the binary numbers.

Nibble
Dword
Word
Bit
Byte

Answer(s): D

Reveal Solution Next Question

Free GD0-110 Exam Braindumps (page: 13)

QUESTION: 45

QUESTION: 46

QUESTION: 47

QUESTION: 48

Exam Discussions & Posts