Back to Subject
View Notes

Unit 2 - Practice Quiz

INT250

1 Which component of a traditional Hard Disk Drive (HDD) is responsible for physically holding the magnetic data?

A. Read/Write Head
B. Platter
C. Actuator Arm
D. Spindle

2 What is the smallest physical storage unit on a standard hard disk drive?

A. Cluster
B. Track
C. Sector
D. Cylinder

3 Which term describes the concentric circles on a hard disk platter where data is written?

A. Sectors
B. Clusters
C. Tracks
D. Cylinders

4 In the context of disk addressing, what does CHS stand for?

A. Cluster Head Sector
B. Cylinder Head Sector
C. Circular Hard Storage
D. Cylinder Host System

5 Which logical addressing scheme replaces CHS by assigning a sequential number to each sector?

A. LBA (Logical Block Addressing)
B. ZBR (Zone Bit Recording)
C. MBR (Master Boot Record)
D. GPT (GUID Partition Table)

6 What is a 'Cluster' in the context of file systems?

A. A group of hard drives working together
B. The smallest unit of disk space allocatable by the Operating System
C. A physical defect on the disk surface
D. A specific type of magnetic encoding

7 Which area of the hard drive is often hidden from the operating system and can be used to hide data?

A. MFT
B. HPA (Host Protected Area)
C. Boot Sector
D. FAT Area

8 How does a Solid State Drive (SSD) store data compared to an HDD?

A. Using magnetic fields on platters
B. Using laser pits and lands
C. Using NAND Flash memory
D. Using magnetic tape

9 What process do SSDs use to ensure memory cells wear out evenly?

A. Defragmentation
B. Wear Leveling
C. Journaling
D. Striping

10 Which command allows an operating system to inform an SSD which blocks of data are no longer considered in use?

A. TRIM
B. FORMAT
C. CHKDSK
D. CLEAN

11 What is the standard size of the Master Boot Record (MBR)?

A. 1024 bytes
B. 512 bytes
C. 4096 bytes
D. 256 bytes

12 What is the specific hex signature located at the end of the MBR (offset 510-511)?

A. 0xAA55
B. 0x55AA
C. 0xFF00
D. 0x00FF

13 How many primary partitions does the MBR partition table support by default?

A. 2
B. 4
C. 16
D. 128

14 Which partitioning scheme overcomes the 2TB size limit of MBR?

A. FAT32
B. LBA
C. CHS
D. GPT (GUID Partition Table)

15 What is the first step in the general booting process of a computer?

A. Loading the Kernel
B. POST (Power-On Self-Test)
C. Reading the MBR
D. Starting the Init process

16 In the Windows Vista and later boot process, which file replaces NTLDR?

A. boot.ini
B. bootmgr
C. winload.exe
D. ntoskrnl.exe

17 Where is the Boot Configuration Data (BCD) store typically located in a modern Windows system?

A. C:\Windows\System32
B. \Boot\BCD on the active partition
C. Inside the MBR
D. Inside the Registry

18 What is the most common bootloader used in Linux distributions?

A. LILO
B. GRUB
C. NTLDR
D. Bootmgr

19 Which specific Linux directory contains the kernel image and bootloader files?

A. /etc
B. /boot
C. /dev
D. /sys

20 What is 'File Slack'?

A. The unused space between the end of the file and the end of the cluster
B. The space occupied by deleted files
C. The space used by the MFT
D. The metadata stored in the file header

21 What is the maximum file size supported by the FAT32 file system?

A. 2 GB
B. 4 GB
C. 32 GB
D. 16 TB

22 Which file system is the default for modern Windows operating systems?

A. FAT32
B. exFAT
C. NTFS
D. HFS+

23 In NTFS, where is all information about a file, including its name, timestamps, and permissions, stored?

A. FAT Table
B. MFT (Master File Table)
C. Superblock
D. Inode Table

24 What is a 'Resident File' in NTFS?

A. A file that cannot be deleted
B. A file whose data fits entirely within its MFT record
C. A file stored in the system registry
D. A file located in the Windows directory

25 Which NTFS feature allows data to be hidden 'behind' a file without changing the file's visible size?

A. Journaling
B. ADS (Alternate Data Streams)
C. Encryption
D. Compression

26 Which file system was designed by Microsoft specifically for flash drives to handle large files without the overhead of NTFS?

A. FAT16
B. FAT32
C. exFAT
D. Ext4

27 What is the fundamental metadata structure for files in Linux file systems like Ext4?

A. MFT Record
B. Inode
C. FAT Entry
D. Registry Key

28 Which data structure in a Linux file system stores information about the file system itself (e.g., block size, total blocks)?

A. Superblock
B. Boot Block
C. Data Block
D. Group Descriptor

29 What is the primary advantage of a Journaling File System (like Ext4 or NTFS)?

A. Faster read speeds
B. Recovery from crashes by keeping a log of changes
C. Automatic encryption
D. Smaller cluster sizes

30 In a Linux file system, the directory structure is:

A. Drive-letter based (C:, D:)
B. Hierarchical tree starting at root (/)
C. Flat database
D. Dependent on the BIOS

31 Autopsy is a graphical interface for which underlying digital forensics tool suite?

A. EnCase
B. The Sleuth Kit (TSK)
C. Volatility
D. Wireshark

32 In Autopsy, what is the purpose of the 'Ingest Modules'?

A. To copy the hard drive
B. To automate analysis tasks like hashing and keyword searching
C. To format the evidence drive
D. To crack passwords

33 What does the term 'File Carving' refer to in digital forensics?

A. Deleting files securely
B. Recovering files based on headers and footers without file system metadata
C. Compressing files for storage
D. Encrypting sensitive data

34 Which RAID level uses 'Striping' to increase performance but offers no redundancy?

A. RAID 0
B. RAID 1
C. RAID 5
D. RAID 10

35 Which RAID level mirrors data across two disks for redundancy?

A. RAID 0
B. RAID 1
C. RAID 5
D. RAID 6

36 RAID 5 requires a minimum of how many disks?

A. 2
B. 3
C. 4
D. 5

37 What is the main difference between NAS and SAN?

A. NAS is block-level, SAN is file-level
B. NAS is file-level storage, SAN is block-level storage
C. NAS uses Fibre Channel, SAN uses Ethernet only
D. There is no difference

38 In hexadecimal notation, the value 'F' represents which decimal number?

A. 10
B. 12
C. 15
D. 16

39 How many bits are in a Nibble?

A. 2
B. 4
C. 8
D. 16

40 What is a 'Magic Number' or 'File Signature'?

A. The file size in bytes
B. A unique sequence of bytes at the beginning of a file identifying its format
C. The timestamp of creation
D. The checksum of the file

41 Which character encoding standard uses variable length (1 to 4 bytes) to represent text and covers almost all world languages?

A. ASCII
B. EBCDIC
C. UTF-8
D. Base64

42 In 'Little Endian' byte ordering, how is the hexadecimal value 0x1234 stored in memory?

A. 12 34
B. 34 12
C. 12 12
D. 34 34

43 Which tool allows an examiner to view and edit the raw binary data of a file or disk?

A. Word Processor
B. Hex Editor
C. Compiler
D. Registry Editor

44 The $Bitmap file in NTFS serves what purpose?

A. Stores file names
B. Tracks the allocation status (used/unused) of clusters
C. Stores the boot code
D. Encrypts the drive

45 What is the standard sector size for 'Advanced Format' (4Kn) drives?

A. 512 bytes
B. 1024 bytes
C. 4096 bytes
D. 2048 bytes

46 Which Linux command is commonly used to list block devices and their file systems?

A. lsblk
B. ps
C. netstat
D. grep

47 What is the purpose of the 'Hard Link' in Linux?

A. A shortcut to a file
B. A pointer to the same inode as the original file
C. A copy of the file in a different partition
D. A link to a web address

48 In a Windows Boot Process, what is the function of 'Winload.exe'?

A. It performs the POST
B. It loads the OS kernel (ntoskrnl.exe) and core drivers
C. It manages the user login
D. It formats the hard drive

49 Which interface is designed specifically to overcome the speed bottlenecks of SATA for SSDs?

A. PATA
B. SCSI
C. NVMe
D. USB 2.0

50 JBOD stands for:

A. Just a Bunch of Disks
B. Joint Boot Operation Disk
C. Journaled Block Operation Data
D. Just Boot On Demand