GD0-110 Certification for EnCE Outside North America

Loading demo links...

Showing 4–6 of 10 questions

Question 4 (Topic 0, A)

What files are reconfigured or deleted by EnCase during the creation of an EnCase boot disk?

Select all that apply, then click Submit answer.

  • command.com

  • io.sys

  • drvspace.bin

  • autoexec.bat

Question 5 (Topic 0, A)

You are at an incident scene and determine that a computer contains evidence as described in the search warrant. When you seize the computer, you should:

Select all that apply, then click Submit answer.

  • Record the location that the computer was recovered from.

  • Record the identity of the person(s) involved in the seizure.

  • Record the date and time the computer was seized.

  • Record nothing to avoid inaccuracies that might jeopardize the use of the evidence.

Question 6 (Topic 0, A)

RAM is used by the computer to:

Select an option, then click Submit answer.

  • Permanently store electronic data.

  • Execute the POST during start-up.

  • Temporarily store electronic data that is being processed.

  • Establish a connection with external devices.