Certification for EnCE Outside North America

Here you have the best Guidance Software GD0-110 practice exam questions

You have 173 total questions to study from
Each page has 5 questions, making a total of 35 pages
You can navigate through the pages using the buttons at the bottom
This questions were last updated on November 19, 2025
This site is not affiliated with or endorsed by Guidance Software.

Question 1 of 173

A FAT directory has as a logical size of:

One cluster

0 bytes

128 bytes

64 bytes

Correct Answer: B

Question 2 of 173

By default, what color does EnCase use for the contents of a logical file?

Red

Red on black

Black

Black on red

Correct Answer: C

Question 3 of 173

4 bits allows what number of possibilities?

Correct Answer: A

Question 4 of 173

A hard drive has been formatted as NTFS and Windows XP was installed. The user used fdisk to remove all partitions from that drive. Nothing else was done.
You have imaged the drive and have opened the evidence file with EnCase. What would be the best way to examine this hard drive?

EnCase will not see a drive that has been fdisked.

Use the recovered Deleted Partitions feature and then examine the system.

Conduct a physical search of the hard drive and bookmark any evidence.

Use the add Partition feature to rebuild the partition and then examine the system.

Correct Answer: D

Question 5 of 173

For an EnCase evidence file acquired with a hash value to pass verification, which of the following must be true?

Either the CRC or MD5 hash values must verify.

The CRC values must verify.

The CRC values and the MD5 hash value both must verify.

The MD5 hash value must verify.

Correct Answer: C