EnCE GD0-110 Dumps PDF

Certification Exam for EnCE Outside North America Questions and Answers

Question 9

In Windows 98 and ME, Internet based e-mail, such as Hotmail, will most likely be recovered in the _____________________ folder.

C:\Windows\Temp

C:\Windows\Temporary Internet files

C:\Windows\History\Email

C:\Windows\Online\Applications\email

Question 10

Hash libraries are commonly used to:

Identify files that are already known to the user.

Compare one hash set with another hash set.

Verify the evidence file.

Compare a file header to a file extension.

Question 11

For an EnCase evidence file acquired with a hash value to pass verification, which of the following must be true?

The CRC values and the MD5 hash value both must verify.

The MD5 hash value must verify.

Either the CRC or MD5 hash values must verify.

The CRC values must verify.

Question 12

A sector on a floppy disk is the same size as a sector on a NTFS formatted hard drive.

True

False