GD0-100

GD0-100 practice questions, page 3 of 7, with answer review and explanations.

Question 11

The default export folder remains the same for all cases.

  1. True
  2. False

Question 12

The EnCase default export folder is:

  1. A case-specific setting that cannot be changed.
  2. A case-specific setting that can be changed.
  3. A global setting that can be changed.
  4. A global setting that cannot be changed.

Question 13

Hash libraries are commonly used to:

  1. Compare a file header to a file extension.
  2. Identify files that are already known to the user.
  3. Compare one hash set with another hash set.
  4. Verify the evidence file.

Question 14

Which is the proper formula for determining the size in bytes of a hard drive that uses cylinders (C), heads (H), and sectors (S) geometry?

  1. C X H + S
  2. C X H X S + 512
  3. C X H X S X 512
  4. C X H X S

Question 15

Within EnCase, clicking on Save on the toolbar affects what file(s)?

  1. The evidence files
  2. The open case file
  3. The configuration .ini files
  4. All of the above