A Linux system administrator is troubleshooting a server that fails to boot. The system uses UEFI and systemd. The administrator suspects that the root filesystem is corrupted. Which step should be taken first to diagnose the issue?

Run journalctl -xb to view the boot log and identify the error.

Boot from a live USB and run fsck on the root filesystem.

Use the systemd emergency mode to mount the root filesystem read-only and then run fsck.

Check the UEFI boot order to ensure the correct boot device is selected.

A Linux administrator is setting up a new server and needs to choose a file system for the /var partition, which will store log files that are frequently written and rotated. The administrator wants to minimize the risk of corruption and ensure fast recovery after a crash. Which file system feature is most important for this requirement?

The ability to resize the partition online, which allows the administrator to increase the partition size without downtime.

Extended attributes, which allow storing additional metadata for each file, such as the log rotation schedule.

Journaling, which records metadata changes before they are applied, allowing fast recovery after a crash.

Support for sparse files, which allows log files to appear larger than their actual size, saving disk space.

In the macOS boot process, what is the role of the kernel (XNU)?

It manages system resources and starts system processes

It verifies the digital signature of the boot loader

It provides the user interface for boot options

It initializes hardware and loads the boot loader

EC-CouncilDigital Forensics Essentials

Domain 2Objective 2

Boot Processes and File Systems Across Windows, Linux, and macOS DFE Practice Questions (Page 6)

Part of the Storage Media and Data Acquisition domain, which makes up ~12% of our current practice bank.

38questions here

8free pages

7concepts

Questions 26–30

26application · medium
A Linux system administrator is troubleshooting a server that fails to boot. The system uses UEFI and systemd. The administrator suspects that the root filesystem is corrupted. Which step should be taken first to diagnose the issue?
Select an answer first
27foundation · easy
Which file system is known for its journaling feature and is commonly used as the default for Linux distributions?
Select an answer first
28application · medium
A Linux administrator is setting up a new server and needs to choose a file system for the /var partition, which will store log files that are frequently written and rotated. The administrator wants to minimize the risk of corruption and ensure fast recovery after a crash. Which file system feature is most important for this requirement?
Select an answer first
29foundation · easy
In the macOS boot process, what is the role of the kernel (XNU)?
Select an answer first
30foundation · easy
Which file system is the default for macOS starting with macOS High Sierra (10.13)?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to DFE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “DFE” is a trademark of its owner, used for identification only.

Boot Processes and File Systems Across Windows, Linux, and macOS DFE Practice Questions (Page 6)

Questions 26–30

A Linux system administrator is troubleshooting a server that fails to boot. The system uses UEFI and systemd. The administrator suspects that the root filesystem is corrupted. Which step should be taken first to diagnose the issue?

Which file system is known for its journaling feature and is commonly used as the default for Linux distributions?

In the macOS boot process, what is the role of the kernel (XNU)?

Which file system is the default for macOS starting with macOS High Sierra (10.13)?

Keep studying — Storage Media and Data Acquisition