Winter Special - Limited Time 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: top65certs

GD0-100 Premium Exam Questions

Page: 4 / 7
Total 176 questions

Certification Exam For ENCE North America Questions and Answers

Question 13

The EnCase methodology dictates that the lab drive for evidence have a __________ prior to making an image.

Options:

A.

FAT 16 partition

B.

NTFS partition

C.

unique volume label

D.

bare, unused partition

Question 14

GREP terms are automatically recognized as GREP by EnCase.

Options:

A.

True

B.

False

Question 15

When a non-compressed evidence file is reacquired with compression, the acquisition and verification hash values for the evidence will remain the same for both files.

Options:

A.

True

B.

False

Question 16

By default, what color does EnCase use for slack?

Options:

A.

Black on red

B.

Red on black

C.

Red

D.

Black

Page: 4 / 7
Total 176 questions