CHFI Test Questions with 100% Correct Verified Answers

CHFI Test Questions with 100% Correct
Verified Answers

Which of the following is one of the five UEFI boot process phases?
PAI Phase
PIE Phase
BDS Phase

BSD Phase - ✅BDS Phase



Which item describes the following UEFI boot process phase? The phase of EFI consisting of
initialization code the system executes after powering the system on, manages platform reset
events, and sets the system state.
BDS (Boot Device Selection) Phase
PEI (Pre-EFI Initialization) Phase

DXE (Driver Execution Environment) Phase

SEC (Security) Phase - ✅SEC (Security) Phase



Which item describes the UEFI boot process phase in which the majority of the
initialization occurs?
PEI (Pre-EFI Initialization) Phase
DXE (Driver Execution Environment) Phase

,BDS (Boot Device Selection) Phase

RT (Run Time) Phase - ✅DXE (Driver Execution Environment) Phase



Which item describes the following UEFI boot process phase? The phase of EFI consisting of
clearing the UEFI program from memory, transferring the UEFI program to the OS, and
updating the OS calls for the runtime service using a small part of the memory.

RT (Run Time) Phase
PEI (Pre-EFI Initialization) Phase
BDS (Boot Device Selection) Phase

DXE (Driver Execution Environment) Phase - ✅RT (Run Time) Phase



Which cmdlet can investigators use in Windows PowerShell to parse GPTs of both types of hard
disks including the ones formatted with either UEFI or MBR?
Get-GPT
Get-MBR
Get-BootSector

Get-PartitionTable - ✅Get-BootSector



Which of the following basic partitioning tools displays details about GPT partition tables
in Windows OS?
DiskPart
Gparted
Disk Utility

Fdisk - ✅DiskPart



Which of the following basic partitioning tools displays details about GPT partition tables
in Linux OS?
Fdisk
GNU Parted

,Disk Utility

DiskPart - ✅GNU Parted



On Macintosh computers, which architecture utilizes EFI to initialize the hardware interfaces
after the BootROM performs POST?
PowerPC
Intel
SPARC

ARM - ✅Intel



What stage of the Linux boot process initializes the system hardware and retrieves the
information stored in the CMOS (Complementary Metal-Oxide Semiconductor) chip?
POST Stage
BIOS Stage
Bootloader Stage

Kernel Stage - ✅BIOS Stage



What stage of the Linux boot process includes the task of loading the virtual root file
system created by the initrd image and executes the Linuxrc program?
BIOS Stage
POST Stage
Bootloader Stage

Kernel Stage - ✅Kernel Stage



Which of the following file systems was designed in 1976 for many operating systems, such
as DOS and Windows, for small hard disks and has a simple folder structure which got its
name from the way it organizes data?

Journaling File System (JFS)
File Allocation Table (FAT)

, New Technology File System (NTFS)

Hierarchical File System (HFS) - ✅File Allocation Table (FAT)



What component of a typical FAT32 file system contains duplicates of the File Allocation Table
to help the system check for empty or idle spaces and detailed information about clusters and
their contents including files and directories?

FAT Area
Reserved Area
Boot Sector

Data Area - ✅FAT Area



What component of a typical FAT32 file system consists of data that the document
framework uses to get to the volume and utilizes the framework parcel to stack the working
portion documents?
Reserved Area
Boot Sector
FAT Area

Data Area - ✅Boot Sector



Which component of the NTFS architecture contains executable master boot code that
the system BIOS loads into memory?
Boot Sector
Master Boot Record
Ntfs.sys

Ntldlr.dll - ✅Master Boot Record



How many bytes does a directory entry have allotted for each file and directory in the FAT
file system?
32