Summer Special Limited Time 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: dcdisc65

Page: 1 / 6
Total 52 questions
Exam Code: GD0-100                Update: Oct 15, 2025
Exam Name: Certification Exam For ENCE North America

Guidance Software Certification Exam For ENCE North America GD0-100 Exam Dumps: Updated Questions & Answers (October 2025)

Question # 1

The maximum file segment size for an EnCase evidence file is:

A.

1500 MB

B.

1000 MB

C.

2000 MB

D.

There is no limit.

E.

500 MB

Question # 2

Which of the following directories contain the information that is found on a Windows 98 Desktop?

A.

C:\Program files\Programs\Desktop

B.

C:\Desktop

C.

C:\Startup\Desktop\Items

D.

C:\Windows\Desktop

Question # 3

When an EnCase user double-clicks on a valid .jpg file, that file is:

A.

Copied to the default export folder and opened by an associated program.

B.

Renamed to JPG_0001.jpg and copied to the default export folder.

C.

Copied to the EnCase specified temp folder and opened by an associated program.

D.

Opened by EnCase.

Question # 4

By default, what color does EnCase use for slack?

A.

Black on red

B.

Red on black

C.

Red

D.

Black

Question # 5

An evidence file was archived onto five CD-Rom disks with the third file segment on disk number three. Can the contents of the third file segment be verified by itself while still on the CD?

A.

No. Archived files are compressed and cannot be verified until un-archived.

B.

No. All file segments must be put back together.

C.

Yes. Any segment of an evidence file can be verified through re-computing and comparing the CRCs, even if it is on a CD.

D.

No. EnCase cannot verify files on CDs.

Question # 6

Which is the proper formula for determining the size in bytes of a hard drive that uses cylinders (C), heads (H), and sectors (S) geometry?

A.

C X H + S

B.

C X H X S + 512

C.

C X H X S X 512

D.

C X H X S

Question # 7

A restored floppy diskette will have the same hash value as the original diskette.

A.

True

B.

False

Question # 8

If a hash analysis is run on a case, EnCase:

A.

Will compute a hash value of the evidence file and begin a verification process.

B.

Will generate a hash set for every file in the case.

C.

Will compare the hash value of the files in the case to the hash library.

D.

Will create a hash set to the user specifications. Will create a hash set to the user?specifications.

Question # 9

Which statement would most accurately describe a motherboard?

A.

An add-in card that handles allRAM.

B.

Any circuit board, regardless of its function.

C.

The main circuit board that has slots for the microprocessor, RAM, ROM, and add-in cards.

D.

An add-in card that controls all hard drive activity.

Question # 10

A hash library would most accurately be described as:

A.

A master table of file headers and extensions.

B.

A file containing hash values from one or more selected hash sets.

C.

Botha and b.

D.

A list of the all the MD5 hash values used to verify the evidence files.

Page: 1 / 6
Total 52 questions

Most Popular Certification Exams

Payment

       

Contact us

dumpscollection live chat

Site Secure

mcafee secure

TESTED 15 Oct 2025