Question 1

Describe some of the open source whole disk encryption tools.

Accepted Answer

The following list describes some available open-source encryption tools:
* TrueCrypt (www.Truecrypt.org) creates a virtual encrypted volume-a file mounted as though it were a disk drive.Data is encrypted automatically and in real time.
* CrossCrypt (www.scherrer.cc/crypt/) also creates a virtual encrypted volume and provides filedisk, a command-line utility with options for creating, mounting, dismounting, and encrypting volumes.
* FreeOTFE (on-the-fly encryption, www.freeotfe.org), like other open-source encryption tools, creates a virtual disk that can encrypt data with several popular algorithms.FreeOTFE can be used in Windows 2000 and XP as well as with PDAs.

Question 2

Match each item with a statement below:
-an international data format

Accepted Answer

A) File system 
B) Tracks 
C) Track density 
D) Partition gap 
E) Drive slack
F)NTFS
G)Unicode
H)Data streams
I)BitLocker 
A) File system 
B) Tracks 
C) Track density 
D) Partition gap 
E) Drive slack
F)NTFS
G)Unicode
H)Data streams
I)BitLocker G

Question 3

____ is a text file containing commands that typically run only at system startup to enhance the computer's DOS configuration.

Accepted Answer

A)  Autoexec.bat 
B)  Config.sys 
C)  BootSect.dos 
D)  Io.sys 
A)  Autoexec.bat 
B)  Config.sys 
C)  BootSect.dos 
D)  Io.sys B

Question 4

Match each item with a statement below:
-unused space in a cluster between the end of an active file and the end of the cluster

Accepted Answer

A) File system 
B) Tracks 
C) Track density 
D) Partition gap 
E) Drive slack
F)NTFS
G)Unicode
H)Data streams
I)BitLocker 
A) File system 
B) Tracks 
C) Track density 
D) Partition gap 
E) Drive slack
F)NTFS
G)Unicode
H)Data streams
I)BitLocker

Question 5

____ refers to the number of bits in one square inch of a disk platter.

Accepted Answer

A)  Head skew 
B)  Areal density 
C)  Cylinder skew 
D)  ZBR 
A)  Head skew 
B)  Areal density 
C)  Cylinder skew 
D)  ZBR

Question 6

____, located in the root folder of the system partition, is the device driver that allows the OS to communicate with SCSI or ATA drives that aren't related to the BIOS.

Accepted Answer

A)  Hal.dll 
B)  NTBootdd.sys 
C)  Boot.ini 
D)  Ntoskrnl.exe 
A)  Hal.dll 
B)  NTBootdd.sys 
C)  Boot.ini 
D)  Ntoskrnl.exe

Question 7

On an NTFS disk, the first data set is the ____________________, which starts at sector [0] of the disk.

Accepted Answer

Partition

Question 8

Briefly explain NTFS compressed files.

Accepted Answer

To improve data storage on disk drives,

Question 9

Data streams can obscure valuable evidentiary data, intentionally or by coincidence.

Accepted Answer

A) True 
 B)False

Question 10

The type of file system an OS uses determines how data is stored on the disk.

Accepted Answer

A) True 
 B)False

Question 11

____ is a batch file containing customized settings for MS-DOS that runs automatically.

Accepted Answer

A)  Autoexec.bat 
B)  Config.sys 
C)  Io.sys 
D)  Command.com 
A)  Autoexec.bat 
B)  Config.sys 
C)  Io.sys 
D)  Command.com

Question 12

How are disk clusters numbered by Microsoft file structures?

Accepted Answer

Clusters are numbered sequentially start

Question 13

Match each item with a statement below:
-ways data can be appended to existing files

Accepted Answer

A) File system 
B) Tracks 
C) Track density 
D) Partition gap 
E) Drive slack
F)NTFS
G)Unicode
H)Data streams
I)BitLocker 
A) File system 
B) Tracks 
C) Track density 
D) Partition gap 
E) Drive slack
F)NTFS
G)Unicode
H)Data streams
I)BitLocker

Question 14

Match each item with a statement below:
-the space between each track

Accepted Answer

A) File system 
B) Tracks 
C) Track density 
D) Partition gap 
E) Drive slack
F)NTFS
G)Unicode
H)Data streams
I)BitLocker 
A) File system 
B) Tracks 
C) Track density 
D) Partition gap 
E) Drive slack
F)NTFS
G)Unicode
H)Data streams
I)BitLocker

Question 15

Match each item with a statement below:
-concentric circles on a disk platter where data is located

Accepted Answer

A) File system 
B) Tracks 
C) Track density 
D) Partition gap 
E) Drive slack
F)NTFS
G)Unicode
H)Data streams
I)BitLocker 
A) File system 
B) Tracks 
C) Track density 
D) Partition gap 
E) Drive slack
F)NTFS
G)Unicode
H)Data streams
I)BitLocker

Question 16

Briefly describe how to delete FAT files.

Accepted Answer

When a file is deleted in Windows Explor

Question 17

____ is how most manufacturers deal with a platter's inner tracks being shorter than its outer tracks.

Accepted Answer

A)  Head skew 
B)  Cylinder skew 
C)  ZBR 
D)  Areal density 
A)  Head skew 
B)  Cylinder skew 
C)  ZBR 
D)  Areal density

Question 18

When Microsoft created Windows 95, it consolidated initialization (.ini) files into the ____.

Accepted Answer

A)  IniRecord 
B)  Inidata 
C)  Registry 
D)  Metadata 
A)  IniRecord 
B)  Inidata 
C)  Registry 
D)  Metadata

Question 19

When Microsoft introduced Windows 2000, it added built-in encryption to NTFS called ____.

Accepted Answer

A)  EFS 
B)  VFAT 
C)  LZH 
D)  RAR 
A)  EFS 
B)  VFAT 
C)  LZH 
D)  RAR

Question 20

Match each item with a statement below:
-Microsoft's utility for protecting drive data

Accepted Answer

A) File system 
B) Tracks 
C) Track density 
D) Partition gap 
E) Drive slack
F)NTFS
G)Unicode
H)Data streams
I)BitLocker 
A) File system 
B) Tracks 
C) Track density 
D) Partition gap 
E) Drive slack
F)NTFS
G)Unicode
H)Data streams
I)BitLocker

Describe some of the open source whole disk encryption tools.

Match each item with a statement below: -an international data format

____ is a text file containing commands that typically run only at system startup to enhance the computer's DOS configuration.

Match each item with a statement below: -unused space in a cluster between the end of an active file and the end of the cluster

____ refers to the number of bits in one square inch of a disk platter.

____, located in the root folder of the system partition, is the device driver that allows the OS to communicate with SCSI or ATA drives that aren't related to the BIOS.

On an NTFS disk, the first data set is the ____________________, which starts at sector [0] of the disk.

Briefly explain NTFS compressed files.

Data streams can obscure valuable evidentiary data, intentionally or by coincidence.

The type of file system an OS uses determines how data is stored on the disk.

____ is a batch file containing customized settings for MS-DOS that runs automatically.

How are disk clusters numbered by Microsoft file structures?

Match each item with a statement below: -ways data can be appended to existing files

Match each item with a statement below: -the space between each track

Match each item with a statement below: -concentric circles on a disk platter where data is located

Briefly describe how to delete FAT files.

____ is how most manufacturers deal with a platter's inner tracks being shorter than its outer tracks.

When Microsoft created Windows 95, it consolidated initialization (.ini) files into the ____.

When Microsoft introduced Windows 2000, it added built-in encryption to NTFS called ____.

Match each item with a statement below: -Microsoft's utility for protecting drive data

Computer Forensics and Investigations As a Profession

Understanding Computer Investigations

The Investigators Office and Laboratory

Data Acquisition

Processing Crime and Incident Scenes

Current Computer Forensics Tools

Macintosh and Linux Boot Processes and File Systems

Computer Forensics Analysis and Validation

Recovering Graphics Files

Virtual Machines, Network Forensics, and Live Acquisitions

E-Mail Investigations

Cell Phone and Mobile Device Forensics

Report Writing for High-Tech Investigations

Expert Testimony in High-Tech Investigations

Ethics for the Expert Witness

Filters

Exam 6: Working With Windows and Dos Systems

Describe some of the open source whole disk encryption tools.

Match each item with a statement below: -an international data format

____ is a text file containing commands that typically run only at system startup to enhance the computer's DOS configuration.

Match each item with a statement below: -unused space in a cluster between the end of an active file and the end of the cluster

____ refers to the number of bits in one square inch of a disk platter.

____, located in the root folder of the system partition, is the device driver that allows the OS to communicate with SCSI or ATA drives that aren't related to the BIOS.

On an NTFS disk, the first data set is the ____________________, which starts at sector [0] of the disk.

Briefly explain NTFS compressed files.

Data streams can obscure valuable evidentiary data, intentionally or by coincidence.

The type of file system an OS uses determines how data is stored on the disk.

____ is a batch file containing customized settings for MS-DOS that runs automatically.

How are disk clusters numbered by Microsoft file structures?

Match each item with a statement below: -ways data can be appended to existing files

Match each item with a statement below: -the space between each track

Match each item with a statement below: -concentric circles on a disk platter where data is located

Briefly describe how to delete FAT files.

____ is how most manufacturers deal with a platter's inner tracks being shorter than its outer tracks.

When Microsoft created Windows 95, it consolidated initialization (.ini) files into the ____.

When Microsoft introduced Windows 2000, it added built-in encryption to NTFS called ____.

Match each item with a statement below: -Microsoft's utility for protecting drive data

Computer Forensics and Investigations As a Profession

Understanding Computer Investigations

The Investigators Office and Laboratory

Data Acquisition

Processing Crime and Incident Scenes

Current Computer Forensics Tools

Macintosh and Linux Boot Processes and File Systems

Computer Forensics Analysis and Validation

Recovering Graphics Files

Virtual Machines, Network Forensics, and Live Acquisitions

E-Mail Investigations

Cell Phone and Mobile Device Forensics

Report Writing for High-Tech Investigations

Expert Testimony in High-Tech Investigations

Ethics for the Expert Witness

Filters