GD0-110

GD0-110 practice questions, page 3 of 7, with answer review and explanations.

Question 11

In Windows, the file MyNote.txt is deleted from C Drive and is automatically sent to the Recycle Bin. The long filename was MyNote.txt and the short filename was MYNOTE.TXT. When viewing the Recycle Bin with EnCase, how will the long filename and MyNote.txt and the short filename was MYNOTE.TXT?

  1. MyNote.txt, DC0.txt
  2. MyNote.del, DC1.del
  3. MyNote.txt, CD0.txt
  4. MyNote.del, DC0.del

Question 12

In hexadecimal notation, one byte is represented by _____ character(s).

  1. 8
  2. 4
  3. 2
  4. 1

Question 13

Hash libraries are commonly used to:

  1. Compare a file header to a file extension.
  2. Compare one hash set with another hash set.
  3. Identify files that are already known to the user.
  4. Verify the evidence file.

Question 14

A personal data assistant was placed in a evidence locker until an examiner has time to examine it. Which of the following areas would require special attention?

  1. Chain-of-custody
  2. Cross-contamination
  3. Storage
  4. There is no concern

Question 15

How many copies of the FAT are located on a FAT 32, Windows 98-formatted partition?

  1. 3
  2. 1
  3. 4
  4. 2