Exam 5: Working With Windows and Cli Systems

​A typical disk drive stores how many bytes in a single sector?

The ______________ is the device that reads and writes data to a drive.​

​What third party encryption tool creates a virtual encrypted volume, which is a file mounted as though it were a disk drive?

What command below can be used to decrypt EFS files?​

When using the File Allocation Table (FAT), where is the FAT database typically written to?​

​What term below describes a column of tracks on two or more disk platters?

___________ are made up of one or more platters coated with magnetic material, and data ​is stored in a particular way.

Select below the file system that was developed for mobile personal storage devices, such as flash memory devices, secure digital eXtended capacity (SDCX), and memory sticks:​

Match each term with the correct definition below: -?Information contained in ROM that a computer accesses during startup; this information tells the computer how to access the OS and hard drive.

To help prevent loss of information, software vendors, including Microsoft, now provide whole disk encryption. This feature creates new challenges in examining and recovering data from drivers. What are four features offered by whole disk encryption tools that forensics examiners should be aware of?