VIP Exclusive
EnCE (EnCase Certified Examiner) VIP Practice Exam
EnCE — The EnCE (EnCase Certified Examiner) is a two-phase certification issued by OpenText (formerly Guidance Software): Phase 1 is a 180-question written exam (3 hours, 80% pass mark) covering digital forensics theory and EnCase software; Phase 2 is a practical examination requiring candidates to solve a real forensic challenge using EnCase.
30
Questions
180m
Time Limit
80.00%
To Pass
Question 1 of 30👑 VIP
During an investigation, you acquire a forensic image of a suspect's 500 GB hard drive using EnCase. After acquisition, the MD5 hash of the image file is 3f2a1c9e8b4d7f6a0e5c2b1d9a8f3e7c. Two weeks later, when you go to analyze the image for trial preparation, you verify the hash again and obtain the same value. What does this confirm?
Questions 2–30 and full explanations are VIP-exclusive.