최신 Guidance Software Certification GD0-110 무료샘플문제:
1. Hash libraries are commonly used to:
A) Identify files that are already known to the user.
B) Compare a file header to a file extension.
C) Compare one hash set with another hash set.
D) Verify the evidence file.
2. The following GREP expression was typed in exactly as shown. Choose the answer(s) that would result. [^a-z]Tom[^a-z]
A) Tomato
B) om? ? RP
C) Toms
D) Stomp
3. If cluster number 10 in the FAT contains the number 55, this means:
A) That cluster 10 is used and the file continues in cluster number 55.
B) The cluster number 55 is the end of an allocated file.
C) That the file starts in cluster number 55 and continues to cluster number 10.
D) That there is a cross-linked file.
4. Creating an image of a hard drive that was seized as evidence:
A) May only be done by trained personnel because the process has the potential to alter the original evidence.
B) May only be done by computer scientists.
C) Should be done by the user, as they are most familiar with the hard drive.
D) May be done by anyone because it is a relatively simple procedure.
5. To undelete a file in the FAT file system, EnCase computes the number of _______ the file will use based on the file ______.
A) Sectors; starting extent
B) Clusters; starting extent
C) Clusters; file size
D) Sectors; file size
질문과 대답:
질문 # 1 정답: A | 질문 # 2 정답: B | 질문 # 3 정답: A | 질문 # 4 정답: A | 질문 # 5 정답: C |