Full Access Guidance Software GD0-110 Tutorials

Certification Exam for EnCE Outside North America Questions and Answers

Question 5

During the power-up sequence, which of the following happens first?

The boot sector is located on the hard drive.

The power On Self-Test.

The floppy drive is checked for a diskette.

The BIOS on an add-in card is executed.

Question 6

Which of the following aspects of the EnCase evidence file can be changed during a reacquire of the evidence file?

The investigator name

The evidence number

The acquisition notes

None of the above

Question 7

The end of a logical file to the end of the cluster that the file ends in is called:

Unallocated space

Allocated space

Available space

Slack

Question 8

All investigators using EnCase should run tests on the evidence file acquisition and verification process to:

Further the investigator understanding of the evidence file.

Give more weight to the investigator testimony in court.

Insure that the investigator is using the proper method of acquisition.

All of the above.