GD0-100

GD0-100 practice questions, page 4 of 7, with answer review and explanations.

Question 16

EnCase uses the _________________ to conduct a signature analysis.

  1. file signature table
  2. hash library
  3. file Viewers
  4. Both a and b

Question 17

EnCase is able to read and examine which of the following file systems?

  1. NTFS
  2. EXT3
  3. FAT
  4. HFS

Question 18

ROM is an acronym for:

  1. Read Open Memory
  2. Random Open Memory
  3. Read Only Memory
  4. Relative Open Memory

Question 19

If a floppy diskette is in the drive, the computer will always boot to that drive before any other device.

  1. False
  2. True

Question 20

A standard Windows 98 boot disk is acceptable for booting a suspect drive.

  1. True
  2. False