GD0-100 Online Practice Questions and Answers

Which of the following selections would be used to keep track of a fragmented file in the FAT file system?

A. The directory entry for the fragmented file

B. The partition table of extents

C. The File Allocation Table

D. All of the above

A signature analysis has been run on a case. The result ?*JPEG ?in the signature column means:

A. The file signature is unknown and the header is a JPEG.

B. The file signature is a JPEG signature and the file extension is incorrect.

C. The file signature is unknown and the file extension is JPEG.

D. None of the above.

The EnCase evidence file logical filename can be changed without affecting the verification of the acquired evidence.

A. True

B. False

In the FAT file system, the size of a deleted file can be found:

A. In the FAT

B. In the directory entry

C. In the file footer

D. In the file header

A restored floppy diskette will have the same hash value as the original diskette.

A. True

B. False

The signature table data is found in which of the following files?

A. The evidence file

B. The configuration FileSignatures.ini file

C. All of the above

D. The case file

The following keyword was typed in exactly as shown. Choose the answer(s) that would be found. All search criteria have default settings. Tom

A. Tomorrow

B. [email protected]

C. Tom

D. Stomp

In the EnCase environment, the term xternal viewers?is best described as: In the EnCase environment, the term ?xternal viewers?is best described as:

A. Programs that are exported out of an evidence file.

B. Any program that will work with EnCase.

C. Any program that is loaded on the lab hard drive.

D. Programsthat are associated with EnCase to open specific file types.

To undelete a file in the FAT file system, EnCase obtains the starting extent from the:

A. Directory entry

B. FAT

C. Operating system

D. File header

The acronym ASCII stands for:

A. American Standard Communication Information Index

B. American Standard Code for Information Interchange

C. Accepted Standard Code for Information Interchange

D. Accepted Standard Communication Information Index