Amazon
Avaya
Checkpoint
Cisco®
CompTIA
CrowdStrike
EC-Council
EXIN
Fortinet
Google
ISC
ISC2
ITIL®
Juniper
Microsoft
MuleSoft
Okta
Palo Alto Networks
Salesforce
SAP
All Vendors
  1. Home
  2. Guidance Software
  3. GD0-100

Guidance Software GD0-100 Exam (page: 1)
Guidance Software Certification Exam For ENCE North America
Updated on: 11-Aug-2025

Viewing Page 1 of 37
GD0-100 PDF 176 Questions

When an EnCase user double-clicks on a file within EnCase what determines the action that will result? Select all that apply

  1. The settings in the case file.
  2. The settings in the FileTypes.ini file.
  3. The setting in the evidence file.

Answer(s): B



Search results are found in which of the following files? Select all that apply.

  1. The evidence file
  2. The configuration Searches.ini file
  3. The case file

Answer(s): C



If cluster #3552 entry in the FAT table contains a value of ?? this would mean:

  1. The cluster is unallocated
  2. The cluster is the end of a file
  3. The cluster is allocated
  4. The cluster is marked bad

Answer(s): A



The following GREP expression was typed in exactly as shown. Choose the answer(s) that would result. Bob@ [a-z]+.com

  1. Bob@New zealand.com
  2. Bob@My-Email.com
  3. Bob@America.com
  4. Bob@a-z.com

Answer(s): C



You are an investigator and have encountered a computer that is running at the home of a suspect. The computer does not appear to be a part of a network. The operating system is Windows XP Home. No programs are visibly running. You should:

  1. Pull the plug from the back of the computer.
  2. Turn it off with the power button.
  3. Pull the plug from the wall.
  4. Shut it down with the start menu.

Answer(s): A



Viewing Page 1 of 37



Share your comments for Guidance Software GD0-100 exam with other users:

Malik 9/28/2023 1:09:00 PM

nice tip and well documented
Anonymous