ENCE PRACTICE TEST NEWEST ACTUAL WITH
COMPLETE QUESTIONS WITH DETAILED VERIFIED
ANSWERS //GRADED A+//(100% CORRECT ANSWERS)
/ALREADY
Grep up carrot: [^]
A circumflex at the start of the string in brackets
means NOT. Hence [^hy] matches any characters
except h and y.
Grep dash: [-]
A dash within the brackets signifies a range of
characters. For example, [a-e] matches any character
from a through e, inclusive.
Grep backslash : [\]
A backslash before a character indicates that the
character is to be treated literally and not as a GREP
character.
Page 1 of 32
,Where are file signatures stored in encase
Stored in the EnCase configuration file FileTypes.ini
How many hash libraries can you have in a case?
You can have two Hash Libraries for each case
How is a hash value computed?
The hash value of a file is computed only from the
logical file independent of the file name, time/date
stamps, and the slack space of the physical file
Nibble
4 bit: binary 0000
Byte
8 Bit: binary 0000 0000
Word
Page 2 of 32
,16 bits: 0000 0000 0000 0000
What is the ASCII table built on
7-bit system
What does ASCII stand for?
American Standard Code for Information Interchange
How many bytes does unicode use for each character?
Unicode uses two bytes for each character, allowing
the representation of 65,536 characters
Data in each data block is verified by a CRC when no
compression is used. True or false?
True
A case file can contain any number of hard drives or
removable media. True or False?
True
Page 3 of 32
, What does a plus sign after a character do, GREP.
A plus sign after a character matches any number of
occurrences of that character except zero. For example
"john,+smith" would match "john,smith" or "john,,smith,"
but would NOT match "johnsmith."
What does a # sign after a character do, GREP.
A pound / hash sign matches any numeric character [0-
9]. For example ###-#### matches any phone number
in the form 327-4323.
Grep parentheses: (ab)
The parentheses allow the examiner to group individual
characters together as an AND statement.
Grep curly brackets: {m,n}
The curly braces state number of times to repeat, i.e., m
to n times
Page 4 of 32
COMPLETE QUESTIONS WITH DETAILED VERIFIED
ANSWERS //GRADED A+//(100% CORRECT ANSWERS)
/ALREADY
Grep up carrot: [^]
A circumflex at the start of the string in brackets
means NOT. Hence [^hy] matches any characters
except h and y.
Grep dash: [-]
A dash within the brackets signifies a range of
characters. For example, [a-e] matches any character
from a through e, inclusive.
Grep backslash : [\]
A backslash before a character indicates that the
character is to be treated literally and not as a GREP
character.
Page 1 of 32
,Where are file signatures stored in encase
Stored in the EnCase configuration file FileTypes.ini
How many hash libraries can you have in a case?
You can have two Hash Libraries for each case
How is a hash value computed?
The hash value of a file is computed only from the
logical file independent of the file name, time/date
stamps, and the slack space of the physical file
Nibble
4 bit: binary 0000
Byte
8 Bit: binary 0000 0000
Word
Page 2 of 32
,16 bits: 0000 0000 0000 0000
What is the ASCII table built on
7-bit system
What does ASCII stand for?
American Standard Code for Information Interchange
How many bytes does unicode use for each character?
Unicode uses two bytes for each character, allowing
the representation of 65,536 characters
Data in each data block is verified by a CRC when no
compression is used. True or false?
True
A case file can contain any number of hard drives or
removable media. True or False?
True
Page 3 of 32
, What does a plus sign after a character do, GREP.
A plus sign after a character matches any number of
occurrences of that character except zero. For example
"john,+smith" would match "john,smith" or "john,,smith,"
but would NOT match "johnsmith."
What does a # sign after a character do, GREP.
A pound / hash sign matches any numeric character [0-
9]. For example ###-#### matches any phone number
in the form 327-4323.
Grep parentheses: (ab)
The parentheses allow the examiner to group individual
characters together as an AND statement.
Grep curly brackets: {m,n}
The curly braces state number of times to repeat, i.e., m
to n times
Page 4 of 32
