EnCE GD0-100 Exam Dumps

Certification Exam For ENCE North America Questions and Answers

Question 21

Using good forensic practices, when seizing a computer at a business running Windows 2000 Server you should:

Pull the plug from the back of the computer.

Press the power button and hold it in.

Shut it down normally.

Pull the plug from the wall.

Question 22

For an EnCase evidence file acquired with a hash value to pass verification, which of the following must be true?

The MD5 hash value must verify.

The CRC values must verify.

The CRC values and the MD5 hash value both must verify.

Either the CRC or MD5 hash values must verify.

Question 23

Hash libraries are commonly used to:

Compare a file header to a file extension.

Identify files that are already known to the user.

Compare one hash set with another hash set.

Verify the evidence file.

Question 24

A SCSI host adapter would most likely perform which of the following tasks?

Configure the motherboard settings to the BIOS.

Set up the connection of IDE hard drives.

Make SCSI hard drives and other SCSI devices accessible to the operating system.

None of the above.