|
Question 1.
When an En Case user double-clicks on a file within En Case what determines the action that will result? Select all that apply
A. The settings in the case file.
B. The settings in the FileTypes.ini file.
C. The setting in the evidence file.
Answer: B
Question 2.
Search results are found in which of the following files? Select all that apply.
A. The evidence file
B. The configuration Searches.ini file
C. The case file
Answer: C
Question 3.
If cluster #3552 entry in the FAT table contains a value of ?? This would mean:
A. The cluster is unallocated
B. The cluster is the end of a file
C. The cluster is allocated
D. The cluster is marked bad
Answer: A
Question 4.
The following GREP expression was typed in exactly as shown. Choose the answer(s) that would result. Bob@[a-z]+.com
A. Bob @ New zealand.com
B. Bob @ My-Email.com
C. Bob @ America.com
D. Bob @ a-z.com
Answer: C
Question 5.
You are an investigator and have encountered a computer that is running at the home of a suspect. The computer does not appear to be a part of a network.
The operating system is Windows XP Home. No programs are visibly running. You should:
A. Pull the plug from the back of the computer.
B. Turn it off with the power button.
C. Pull the plug from the wall.
D. Shut it down with the start menu.
Answer: A
Question 6.
A physical file size is:
A. The total size in sectors of an allocated file.
B. The total size of all the clusters used by the file measured in bytes.
C. The total size in bytes of a logical file.
D. The total size of the file including the ram slack in bytes.
Answer: B
Question 7.
What is one advantage of the NTFS file system over the FAT16 and FAT32 file systems?
A. Integral support for streaming audio files.
B. Integral support for UNIX compatibility.
C. Integral support for dual-booting with Red Hat Linux.
D. Integral support for file and folder level permissions.
Answer: D
Question 8.
If cluster number 10 in the FAT contains the number 55, this means:
A. That cluster 10 is used and the file continues in cluster number 55.
B. That the file starts in cluster number 55 and continues to cluster number 10.
C. That there is a cross-linked file.
D. The cluster number 55 is the end of an allocated file.
Answer: A
Question 9.
How are the results of a signature analysis examined?
A. By sorting on the category column in the Table view. By sorting on the category column in the
Table view.
B. By sorting on the signature column in the Table view. By sorting on the signature column in the
Table view.
C. By sorting on the hash sets column in the Table view. By sorting on the hash sets column in
the Table view.
D. By sorting on the hash library column in the Table view. By sorting on the hash library column
in the Table view.
Answer: B
Question 10.
The acronym ASCII stands for:
A. American Standard Communication Information Index
B. American Standard Code for Information Interchange
C. Accepted Standard Code for Information Interchange
D. Accepted Standard Communication Information Index
Answer: B
Question 11.
The default export folder remains the same for all cases.
A. True
B. False
Answer:
Question 12.
The En Case default export folder is:
A. A case-specific setting that cannot be changed.
B. A case-specific setting that can be changed.
C. A global setting that can be changed.
D. A global setting that cannot be changed.
Answer: B
Question 13.
Hash libraries are commonly used to:
A. Compare a file header to a file extension.
B. Identify files that are already known to the user.
C. Compare one hash set with another hash set.
D. Verify the evidence file.
Answer: B
Question 14.
Which is the proper formula for determining the size in bytes of a hard drive that uses cylinders (C), heads (H), and sectors (S) geometry?
A. C X H + S
B. C X H X S + 512
C. C X H X S X 512
D. C X H X S
Answer: C
Question 15.
Within En Case, clicking on Save on the toolbar affects what file(s)?
A. All of the above
B. The evidence files
C. The open case file
D. The configuration .ini files
Answer: C
Question 16.
En Case uses the _________________ to conduct a signature analysis.
A. Both a and b
B. file signature table
C. hash library
D. file Viewers
Answer: B
Question 17.
What must you do to attach a new IDE hard drive? (Choose Three)
A. Select a unique ID
B. Set the termination jumpers
C. Set the master/slave jumper
D. Ensure proper cable orientation
E. Install drive bay and secure it properly
Answer: C, D, E
Question 18.
ROM is an acronym for:
A. Read Open Memory
B. Random Open Memory
C. Read Only Memory
D. Relative Open Memory
Answer: C
Question 19.
If a floppy diskette is in the drive, the computer will always boot to that drive before any other device.
A. False
B. True
Answer: A
Question 20.
A standard Windows 98 boot disk is acceptable for booting a suspect drive.
A. True
B. False
Answer: Pending, Send your comments or suggestions at feedback@itcertkeys.com
Question 21.
Search terms are case sensitive by default.
A. False
B. True
Answer: Pending, Send your comments or suggestions at feedback@itcertkeys.com
Question 22.
The following GREP expression was typed in exactly as shown. Choose the answer(s) that would result. Jan 1 st , 2?0?00
A. Jan 1st , 1900
B. Jan 1st , 2100
C. Jan 1st , 2001
D. Jan 1st , 2000
Answer: D
Question 23.
An evidence file can be moved to another directory without changing the file verification.
A. False
B. True
Answer: B
Question 24.
Pressing the power button on a computer that is running could have which of the following results?
A. The computer will instantly shut off.
B. The computer will go into stand-by mode.
C. Nothing will happen.
D. All of the above could happen.
E. The operating system will shut down normally.
Answer: D
|
Question 1.
Given the following raw data record:
----|----10---|----20---|----30
son,Travis,
The following output is desired:
Obs relation firstname
1 son Travis
Which SAS program correctly reads in the raw data?
A. data family;
infile 'file specification';
input relation $ firstname $ / dlm = ',';
run;
B. options dlm = ',';
data family;
infile 'file specification';
input relation $ firstname $;
run;
C. data family ( dlm = ',');
infile 'file specification';
input relation $ firstname $;
run;
D. data family;
infile 'file specification' dlm = ',';
input relation $ firstname $;
run;
Answer: D
Question 2.
The following SAS program is submitted:
libname temp 'SAS data library';
data work.new;
set temp.jobs;
format newdate mmddyy10.;
mdate = month(newdate);
ddate = weekday(newdate);
run;
proc print data = work.new;
run;
The variable NEWDATE contains the SAS date value for April 15, 2005.
What output is produced if April 15, 2005 falls on a Friday?
A. Obs newdate mdate ddate
1 04/15/2005 APR 7
B. Obs newdate mdate ddate
1 04/15/2005 4 6
C. Obs newdate mdate ddate
1 04/15/2005 APR 6
D. Obs newdate mdate ddate
1 04/15/2005 4 7
Answer: B
Question 3.
Given the SAS data set EMPLOYEE_INFO:
EMPLOYEE_INFO
IDNumber Expenses
------------- ----------------
2542 100.00
3612 133.15
2198 234.34
2198 111.12
The following SAS program is submitted:
proc sort data = employee_info;
run;
Which BY statement completes the program and sorts the data sequentially by ascending expense values within each ascending IDNUMBER value?
A. by ascending Expenses IDNumber;
B. by IDNumber Expenses;
C. by ascending IDNumber ascending Expenses;
D. by Expenses IDNumber;
Answer: B
Question 4.
The following SAS program is submitted:
data work.totalsales (keep = monthsales{12});
set work.monthlysales (keep = year product sales);
array monthsales{12};
do i = 1 to 12;
monthsales{i} = sales;
end;
run;
The program fails execution due to syntax errors.
What is the cause of the syntax error?
A. The KEEP= data set option should be the statement KEEP MONTHSALES{12}.
B. The variable MONTHSALES does not exist.
C. An array cannot be referenced on a KEEP data set option.
D. The KEEP= data set option should be (KEEP = MONTHSALES).
Answer: C
Question 5.
The following SAS program is submitted:
data work.total;
set work.salary(keep = department wagerate);
by department;
if first.department
then payroll = 0;
payroll + wagerate;
if last.department;
run;
The SAS data set named WORK.SALARY contains 10 observations for each department, and is currently ordered by DEPARTMENT.
Which statement is true?
A. The BY statement in the DATA step causes a syntax error.
B. The values of the variable PAYROLL represent a total for all values of WAGERATE in the
WORK.SALARY data set.
C. The statement payroll + wagerate; in the DATA step causes a syntax error.
D. The values of the variable PAYROLL represent the total for each department in the
WORK.SALARY data set.
Answer: D
Question 6.
The following SAS program is submitted:
data test;
set sasuser.employees;
if 2 le years_service le 10 then
amount = 1000;
else amount = 0;
amount_per_year = years_service / amount;
run;
What is the value of the variable AMOUNT_PER_YEAR if an employee has been with the company for one year?
A. 0
B. . (missing numeric value)
C. 1
D. 0.001
Answer: B
Question 7.
The following SAS program is submitted:
data work.empsalary;
set work.people (in = inemp)
work.money (in = insal);
if insal and inemp;
run;
The SAS data set WORK.PEOPLE has 5 observations, and the data set WORK.MONEY has 7 observations.
How many observations will the data set WORK.EMPSALARY contain?
A. 0
B. 5
C. 12
D. 7
Answer: A
Question 8.
The following SAS program is submitted:
data work.flights;
destination = 'cph';
select(destination);
when('LHR') city = 'London';
when('CPH') city = 'Copenhagen';
otherwise city = 'Other';
end;
run;
What is the value of the CITY variable?
A. ' ' (missing character value)
B. Other
C. Copenh
D. Copenhagen
Answer: B
Question 9.
The following SAS program is submitted:
data work.sales;
do year = 1 to 5;
do month = 1 to 12;
x + 1;
output;
end;
end;
run;
How many observations are written to the WORK.SALES data set?
A. 60
B. 0
C. 1
D. 5
Answer: A
Question 10.
The following SAS program is submitted:
data work.retail;
cost = '20000';
total = .10 * cost;
run;
What is the result?
A. The value of the variable TOTAL in the output data set is 2000. A note that conversion has
taken place is written to the SAS log.
B. The value of the variable TOTAL in the output data set is missing. An error message is written
to the SAS log.
C. The variable TOTAL in the output data set has no value. The program fails to execute due to a
syntax error.
D. The value of the variable TOTAL in the output data set is 2000. No messages are written to
the SAS log.
Answer: A
Copyright © 2004 CertsBraindumps.com Inc. All rights reserved.