← Back to exam page

GD0-110 – Certification for EnCE Outside North America

Loading demo links...

Showing 4–6 of 10 questions

Question 4 (Topic 0, A)

What files are reconfigured or deleted by EnCase during the creation of an EnCase boot disk?

Select all that apply, then click Submit answer.

  • ○

    command.com

  • ○

    io.sys

  • ○

    drvspace.bin

  • ○

    autoexec.bat

Question 5 (Topic 0, A)

You are at an incident scene and determine that a computer contains evidence as described in the search warrant. When you seize the computer, you should:

Select all that apply, then click Submit answer.

  • ○

    Record the location that the computer was recovered from.

  • ○

    Record the identity of the person(s) involved in the seizure.

  • ○

    Record the date and time the computer was seized.

  • ○

    Record nothing to avoid inaccuracies that might jeopardize the use of the evidence.

Question 6 (Topic 0, A)

RAM is used by the computer to:

Select an option, then click Submit answer.

  • ○

    Permanently store electronic data.

  • ○

    Execute the POST during start-up.

  • ○

    Temporarily store electronic data that is being processed.

  • ○

    Establish a connection with external devices.