- (Exam Topic 2)
Pagefile.sys is a virtual memory file used to expand the physical memory of a computer. Select the registry path for the page file:

1. A. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management
2. B. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\System Management
3. C. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Device Management
4. D. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management\PrefetchParameters

Correct Answer: A

- (Exam Topic 3)
Which of the following protocols allows non-ASCII files, such as video, graphics, and audio, to be sent through the email messages?

1. A. MIME
2. B. BINHEX
3. C. UT-16
4. D. UUCODE

Correct Answer: A

- (Exam Topic 3)
What system details can an investigator obtain from the NetBIOS name table cache?

1. A. List of files opened on other systems
2. B. List of the system present on a router
3. C. List of connections made to other systems
4. D. List of files shared between the connected systems

Correct Answer: C

- (Exam Topic 2)
Before performing a logical or physical search of a drive in Encase, what must be added to the program?

1. A. File signatures
2. B. Keywords
3. C. Hash sets
4. D. Bookmarks

Correct Answer: B

- (Exam Topic 2)
Data is striped at a byte level across multiple drives, and parity information is distributed among all member drives.

What RAID level is represented here?

1. A. RAID Level 0
2. B. RAID Level 5
3. C. RAID Level 3
4. D. RAID Level 1

Correct Answer: B