Forensics and Network Intrusion - C702 exam
Question:
How large is the partition table structure that stores information about the
partitions
present on the hard disk?
Answer:
64 bytes
Question:
On Macintosh computers, which architecture utilizes EFI to initialize the hardware
interfaces after the BootROM performs POST?
Answer:
Intel-based Macintosh
Question:
Computers
:What component of a typical FAT32 file system occupies the largest part of a
partition and stores the actual files and directories?
Answer:
Data Area
Question:
What is a technology that uses multiple smaller disks simultaneously that function
as a single large volume?
Answer:
RAID
,Question:
What is the maximum file system size in ext3?
Answer:
32 TB
Question:
What is the maximum file system size in ext4?
Answer:
1 EiB
:What layer of web application architecture is responsible for the core
functioning
of the system and includes logic and applications, such as .NET, used by
developers
Question:
to build websites according to client requirements?
Answer:
business layer
Question:
What stage of the Linux boot process includes the task of loading the virtual root
file
system created by the initrd image and executes the Linuxrc program?
Answer:
Kernel
, Question:
Stage
What UFS file system part comprises a collection, including a header with
statistics
and free lists, a number of inodes containing file attributes, and a number of
data
blocks?
Answer:
cylinder group
Question:
Which attribute ID does NTFS set as a flag after encrypting a file where the Data
Decryption Field (DDF) and Data Recovery Field (DRF) is stored?
Answer:
0x100
Question:
Which cmdlet can investigators use in Windows PowerShell to analyze the GUID
Partition Table data structure of the hard disk?
Answer:
Get-GPT
Question:
Which cmdlet can investigators use in Windows PowerShell to analyze the GUID
Partition Table to find the exact type of boot sector and display the partition
object?
Answer:
Get-PartitionTable
Question:
How large is the partition table structure that stores information about the
partitions
present on the hard disk?
Answer:
64 bytes
Question:
On Macintosh computers, which architecture utilizes EFI to initialize the hardware
interfaces after the BootROM performs POST?
Answer:
Intel-based Macintosh
Question:
Computers
:What component of a typical FAT32 file system occupies the largest part of a
partition and stores the actual files and directories?
Answer:
Data Area
Question:
What is a technology that uses multiple smaller disks simultaneously that function
as a single large volume?
Answer:
RAID
,Question:
What is the maximum file system size in ext3?
Answer:
32 TB
Question:
What is the maximum file system size in ext4?
Answer:
1 EiB
:What layer of web application architecture is responsible for the core
functioning
of the system and includes logic and applications, such as .NET, used by
developers
Question:
to build websites according to client requirements?
Answer:
business layer
Question:
What stage of the Linux boot process includes the task of loading the virtual root
file
system created by the initrd image and executes the Linuxrc program?
Answer:
Kernel
, Question:
Stage
What UFS file system part comprises a collection, including a header with
statistics
and free lists, a number of inodes containing file attributes, and a number of
data
blocks?
Answer:
cylinder group
Question:
Which attribute ID does NTFS set as a flag after encrypting a file where the Data
Decryption Field (DDF) and Data Recovery Field (DRF) is stored?
Answer:
0x100
Question:
Which cmdlet can investigators use in Windows PowerShell to analyze the GUID
Partition Table data structure of the hard disk?
Answer:
Get-GPT
Question:
Which cmdlet can investigators use in Windows PowerShell to analyze the GUID
Partition Table to find the exact type of boot sector and display the partition
object?
Answer:
Get-PartitionTable
