Understanding Hard Disks and File Systems CHFI Practice Questions (Page 7)

Questions 31–35

1. 31foundation · easy

   Which of the following is a characteristic of the NTFS file system?

   • AIt does not support file permissions or encryption.
   • BIt uses a file allocation table to track cluster chains.
   • CIt stores all file metadata in a single master file table (MFT).
   • DIt is primarily used on macOS systems.
   Reveal Solution Discussion Select an answer first
2. 32foundation · easy

   In hard disk geometry, what is a cylinder?

   • AA single circular ring on one platter surface
   • BThe set of tracks at the same radial position across all platter surfaces
   • CThe area between two adjacent tracks on a platter
   • DThe smallest addressable unit of data on a disk
   Reveal Solution Discussion Select an answer first
4. 33application · medium

   A forensic examiner is comparing two file systems: NTFS and ext4. The examiner needs to identify a key difference that affects forensic analysis. Which of the following is a true difference?

   • ANTFS uses a Master File Table (MFT) to store file metadata, while ext4 uses inodes.
   • BNTFS supports journaling, while ext4 does not.
   • CNTFS supports file permissions, while ext4 does not.
   • DNTFS stores file data in the MFT, while ext4 stores file data in inodes.
   Reveal Solution Discussion Select an answer first
5. 34foundation · easy

   In a traditional hard disk drive, which component is responsible for reading and writing data on the magnetic surfaces of the platters?

   • AController board
   • BSpindle motor
   • CRead/write head
   • DActuator arm
   Reveal Solution Discussion Select an answer first
6. 35application · medium

   A forensic examiner is examining a USB drive that was used on a Windows 10 system. The drive is formatted with exFAT. The examiner needs to recover a deleted file. Which of the following is the most important structure to examine to locate the file's data?

   • AThe Partition Table
   • BThe Master File Table (MFT)
   • CThe File Allocation Table (FAT)
   • DThe Boot Sector
   Reveal Solution Discussion Select an answer first