Digital Forensics (Module 1 Post Test)
The ________ is the part of the disk that reads and writes bits that are stored on the ________. Correct
Answer: Head; platter.
Unlike Intel hard disks that simply use the term "partitions," Sun Solaris hard disks divide the capacity of
a disk into smaller units called ________. Correct Answer: Slices
Which of the following are challenges to data recovery for "highly available" memory? Correct Answer:
The data cannot be made unavailable for any length of time and therefore proper imaging software
would be unusable. (?)
Which of the following would NOT be considered "information" to a forensics investigator? Correct
Answer: Default installation files for the Windows XP Operating System.
A computer's boot process begins when what event occurs? Correct Answer: The computer is powered
on.
Due to recent market trends, if an investigator is asked to retrieve information off of a mobile device,
which operating system is it most likely to use? Correct Answer: Android
Why would a disk's "bad blocks" be interesting to a forensics investigator? Correct Answer: Bad blocks
are data blocks from old files that have been detected as physically "bad" and may be recovered.
The most frequent interface for flash media is ________. Correct Answer: USB (?)
Which of the following defines a MegaByte. Correct Answer: 1024 bits.
A folder is a metaphor that describes how data is ________. Correct Answer: Logically grouped
What can be used to gain access to a local copy of a cloud storage file system? Correct Answer: Local
cache.
The ________ is responsible for copying files from memory to the disk media on UNIX/Linux. Correct
Answer: File system manager.
A file is a metaphor that includes all of the following EXCEPT ________. Correct Answer: Priority.
A new process is always "called" or "created" as a result of ________. Correct Answer: The process
manager reading programs from disk media.
On Linux and UNIX, the /home directory structure is the standard location for storing ________. Correct
Answer: Data specific to users.
RAID is a configuration of disks that provides the benefit of ________. Correct Answer: Encryption.
The ________ is the part of the disk that reads and writes bits that are stored on the ________. Correct
Answer: Head; platter.
Unlike Intel hard disks that simply use the term "partitions," Sun Solaris hard disks divide the capacity of
a disk into smaller units called ________. Correct Answer: Slices
Which of the following are challenges to data recovery for "highly available" memory? Correct Answer:
The data cannot be made unavailable for any length of time and therefore proper imaging software
would be unusable. (?)
Which of the following would NOT be considered "information" to a forensics investigator? Correct
Answer: Default installation files for the Windows XP Operating System.
A computer's boot process begins when what event occurs? Correct Answer: The computer is powered
on.
Due to recent market trends, if an investigator is asked to retrieve information off of a mobile device,
which operating system is it most likely to use? Correct Answer: Android
Why would a disk's "bad blocks" be interesting to a forensics investigator? Correct Answer: Bad blocks
are data blocks from old files that have been detected as physically "bad" and may be recovered.
The most frequent interface for flash media is ________. Correct Answer: USB (?)
Which of the following defines a MegaByte. Correct Answer: 1024 bits.
A folder is a metaphor that describes how data is ________. Correct Answer: Logically grouped
What can be used to gain access to a local copy of a cloud storage file system? Correct Answer: Local
cache.
The ________ is responsible for copying files from memory to the disk media on UNIX/Linux. Correct
Answer: File system manager.
A file is a metaphor that includes all of the following EXCEPT ________. Correct Answer: Priority.
A new process is always "called" or "created" as a result of ________. Correct Answer: The process
manager reading programs from disk media.
On Linux and UNIX, the /home directory structure is the standard location for storing ________. Correct
Answer: Data specific to users.
RAID is a configuration of disks that provides the benefit of ________. Correct Answer: Encryption.
