PDF Version DemoGuidance Software GD0-100 Exam Overview:
| Certification Vendor: | Guidance Software (now OpenText) |
|---|---|
| Exam Name: | Certification Exam For ENCE North America |
| Exam Number: | GD0-100 |
| Certificate Validity Period: | 3 years |
| Available Languages: | English |
| Related Certifications: | EnCEP EnCE EnCE-A |
| Passing Score: | 70%–75% |
| Exam Price: | Approx. $950–$1,050 USD |
| Exam Duration: | 90–120 |
| Exam Format: | Scenario-based, True/false, Multiple-choice |
| Real Exam Qty: | 75–170 |
| Recommended Training: | OpenText EnCase Official Training |
| Exam Registration: | Exam Delivery Partner Official ENCE Registration |
| Sample Questions: | Guidance Software GD0-100 Sample Questions |
| Exam Way: | Proctored: Onsite at authorized test centers or online remote proctoring |
| Pre Condition: | Basic digital forensics knowledge; recommended EnCase training and hands-on experience |
| Official Syllabus URL: | https://www.opentext.com/products/encase-forensics/certification |
Guidance Software GD0-100 Exam Syllabus Topics:
| Section | Weight | Objectives |
|---|---|---|
| Legal & Ethical Principles | 20% | - Chain of custody & evidence admissibility - E-discovery & forensic standards - Privacy laws & regulatory compliance |
| Data Analysis & Investigation | 20% | - Email, registry & log analysis - Timeline reconstruction & activity mapping - Deleted file & slack space recovery |
| Evidence Preservation & Acquisition | 25% | - Forensic imaging methods - Write-blocking & hash verification - Live system & removable media acquisition |
| Reporting & Documentation | 10% | - Forensic report writing - Technical documentation & testimony preparation |
| EnCase Software Usage | 25% | - File system analysis & artifact recovery - Case creation & configuration - Data indexing & searching |
Guidance Software Certification Exam For ENCE North America Sample Questions:
Question #1
Using good forensic practices, when seizing a computer at a business running Windows 2000 Server you should
A. Shut it down normally.
B. Pull the plug from the wall.
C. Press the power button and hold it in.
D. Pull the plug from the back of the computer.
Question #2
The EnCase evidence file is best described as
A. A clone of the source hard drive.
B. A bit stream image of the source hard drive written to the corresponding sectors of the target hard drive.
C. A bit stream image of the source hard drive written to a file, or several file segments.
D. A sector-by-sector copy of the source hard drive written to the corresponding sectors of the target hard drive.
Question #3
The following GREP expression was typed in exactly as shown. Choose the Answer:(s) that would result.[\x00-\x05]\x00\x00?>[?[@?[?[?[
A. 04 06 0000 00 FF FF BA
B. FF 0000 00 00 FF BA
C. 0000 00 01 FF FF BA
D. 04 0000 00 FF FF BA
Question #4
Which of the following would be a true statement about the function of the BIOS?
A. Botha and c.
B. The BIOS is responsible for swapping out memory pages when RAM fills up.
C. The BIOS integrates compressed executable files with memory addresses for faster execution.
D. The BIOS is responsible for checking and configuring the system after the power is turned on.
Question #5
Within EnCase, you highlight a range of data within a file. The length indicator displays the value 30. How many bytes have you actually selected?
A. 30
B. 3
C. 60
D. 15
Solutions:
| Question #1 Answer: A | Question #2 Answer: C | Question #3 Answer: D | Question #4 Answer: D | Question #5 Answer: A |
We are confident about the products and aim to help you pass with ease. In case of failure, we will provide a no hassle full money back guarantee for the purchasing fee.
1313 Customer Reviews
Quality and ValueITbraindumps Practice Exams are written to the highest standards of technical accuracy, using only certified subject matter experts and published authors for development - no all study materials.
Tested and ApprovedWe are committed to the process of vendor and third party approvals. We believe professionals and executives alike deserve the confidence of quality coverage these authorizations provide.
Easy to PassIf you prepare for the exams using our ITbraindumps testing engine, It is easy to succeed for all certifications in the first attempt. You don't have to deal with all dumps or any free torrent / rapidshare all stuff.
Try Before BuyITbraindumps offers free demo of each product. You can check out the interface, question quality and usability of our practice exams before you decide to buy.