Question 1

____________________ is a journaling version of Ext2fs that reduces file recovery time after a crash.

Accepted Answer

The answer of ____________________ is a journaling version of Ext2fs...

Question 2

On a Linux computer, ____ is the path for the first partition on the primary master IDE disk drive.

Accepted Answer

A)  /dev/sda1 
B)  /dev/hdb1 
C)  /dev/hda1 
D)  /dev/ide1 
A)  /dev/sda1 
B)  /dev/hdb1 
C)  /dev/hda1 
D)  /dev/ide1

Question 3

The final component in the UNIX and Linux file system is a(n) ____, which is where directories and files are stored on a disk drive.

Accepted Answer

A)  superblock 
B)  data block 
C)  boot block 
D)  inode block 
A)  superblock 
B)  data block 
C)  boot block 
D)  inode block

Question 4

Ext2fs can support disks as large as ____ TB and files as large as 2 GB.

Accepted Answer

A)  4 
B)  8 
C)  10 
D)  12 
A)  4 
B)  8 
C)  10 
D)  12

Question 5

Match each item with a statement below:
-ISO standard for CDs

Accepted Answer

A) File Manager 
B) Inode blocks 
C) ISO 9660 
D) LILO 
E) Clumps
F)Volume
G)ls
H)Catalog
I)Finder 
A) File Manager 
B) Inode blocks 
C) ISO 9660 
D) LILO 
E) Clumps
F)Volume
G)ls
H)Catalog
I)Finder

Question 6

With Mac OSs, a system application called ____ tracks each block on a volume to determine which blocks are in use and which ones are available to receive data.

Accepted Answer

A)  Extents overflow file 
B)  Volume Bitmap 
C)  Master Directory Block 
D)  Volume Control Block 
A)  Extents overflow file 
B)  Volume Bitmap 
C)  Master Directory Block 
D)  Volume Control Block

Question 7

Explain the problems you can encounter with pre-ATA-33 devices when connecting them to current PCs.

Accepted Answer

The CMOS on current PCs uses logical blo

Question 8

To find deleted files during a forensic investigation on a Linux computer, you search for inodes that contain some data and have a link count of ____.

Accepted Answer

A)  -1 
B)  0 
C)  1 
D)  2 
A)  -1 
B)  0 
C)  1 
D)  2

Question 9

What is a bad block inode on Linux?

Accepted Answer

All disks have more storage capacity tha

Question 10

What is a continuation inode?

Accepted Answer

To provide more information about a file

____________________ is a journaling version of Ext2fs that reduces file recovery time after a crash.

On a Linux computer, ____ is the path for the first partition on the primary master IDE disk drive.

The final component in the UNIX and Linux file system is a(n) ____, which is where directories and files are stored on a disk drive.

Ext2fs can support disks as large as ____ TB and files as large as 2 GB.

Match each item with a statement below: -ISO standard for CDs

With Mac OSs, a system application called ____ tracks each block on a volume to determine which blocks are in use and which ones are available to receive data.

Explain the problems you can encounter with pre-ATA-33 devices when connecting them to current PCs.

To find deleted files during a forensic investigation on a Linux computer, you search for inodes that contain some data and have a link count of ____.

What is a bad block inode on Linux?

What is a continuation inode?

Computer Forensics and Investigations As a Profession

Understanding Computer Investigations

The Investigators Office and Laboratory

Data Acquisition

Processing Crime and Incident Scenes

Working With Windows and Dos Systems

Current Computer Forensics Tools

Computer Forensics Analysis and Validation

Recovering Graphics Files

Virtual Machines, Network Forensics, and Live Acquisitions

E-Mail Investigations

Cell Phone and Mobile Device Forensics

Report Writing for High-Tech Investigations

Expert Testimony in High-Tech Investigations

Ethics for the Expert Witness

Filters

Exam 8: Macintosh and Linux Boot Processes and File Systems

____________________ is a journaling version of Ext2fs that reduces file recovery time after a crash.

On a Linux computer, ____ is the path for the first partition on the primary master IDE disk drive.

The final component in the UNIX and Linux file system is a(n) ____, which is where directories and files are stored on a disk drive.

Ext2fs can support disks as large as ____ TB and files as large as 2 GB.

Match each item with a statement below: -ISO standard for CDs

With Mac OSs, a system application called ____ tracks each block on a volume to determine which blocks are in use and which ones are available to receive data.

Explain the problems you can encounter with pre-ATA-33 devices when connecting them to current PCs.

To find deleted files during a forensic investigation on a Linux computer, you search for inodes that contain some data and have a link count of ____.

What is a bad block inode on Linux?

What is a continuation inode?

Computer Forensics and Investigations As a Profession

Understanding Computer Investigations

The Investigators Office and Laboratory

Data Acquisition

Processing Crime and Incident Scenes

Working With Windows and Dos Systems

Current Computer Forensics Tools

Computer Forensics Analysis and Validation

Recovering Graphics Files

Virtual Machines, Network Forensics, and Live Acquisitions

E-Mail Investigations

Cell Phone and Mobile Device Forensics

Report Writing for High-Tech Investigations

Expert Testimony in High-Tech Investigations

Ethics for the Expert Witness

Filters