Certification For ENCE North America

Here you have the best Guidance Software GD0-100 practice exam questions

You have 170 total questions to study from
Each page has 5 questions, making a total of 34 pages
You can navigate through the pages using the buttons at the bottom
This questions were last updated on November 20, 2025
This site is not affiliated with or endorsed by Guidance Software.

Question 1 of 170

When an EnCase user double-clicks on a file within EnCase what determines the action that will result? Select all that apply

The settings in the case file.

The settings in the FileTypes.ini file.

The setting in the evidence file.

Correct Answer: B

Question 2 of 170

You are an investigator and have encountered a computer that is running at the home of a suspect. The computer does not appear to be a part of a network. The operating system is Windows XP Home. No programs are visibly running. You should:

Pull the plug from the back of the computer.

Turn it off with the power button.

Pull the plug from the wall.

Shut it down with the start menu.

Correct Answer: A

Question 3 of 170

A physical file size is:

The total size in sectors of an allocated file.

The total size of all the clusters used by the file measured in bytes.

The total size in bytes of a logical file.

The total size of the file including the ram slack in bytes.

Correct Answer: B

Question 4 of 170

In Unicode, one printed character is composed of ____ bytes of data.

Correct Answer: C

Question 5 of 170

If cluster number 10 in the FAT contains the number 55, this means:

That cluster 10 is used and the file continues in cluster number 55.

That the file starts in cluster number 55 and continues to cluster number 10.

That there is a cross-linked file.

The cluster number 55 is the end of an allocated file.

Correct Answer: A