← Back to exam page

GD0-110 – Certification for EnCE Outside North America

Loading demo links...

Showing 7–9 of 10 questions

Question 7 (Topic 0, A)

Changing the filename of a file will change the hash value of the file.

Select an option, then click Submit answer.

  • ○

    True

  • ○

    False

Question 8 (Topic 0, A)

When undeleting a file in the FAT file system, EnCase will check the _____________ to see if it has already been overwritten.

Select an option, then click Submit answer.

  • ○

    directory entry

  • ○

    FAT

  • ○

    data on the hard drive

  • ○

    deletion table

Question 9 (Topic 0, A)

You are conducting an investigation and have encountered a computer that is running in the field. The operating system is Windows XP. A software program is currently running and is visible on the screen. You should:

Select an option, then click Submit answer.

  • ○

    Photograph the screen and pull the plug from the back of the computer.

  • ○

    Navigate through the program and see what the program is all about, then pull the plug.

  • ○

    Pull the plug from the back of the computer.

  • ○

    Pull the plug from the wall.