
GIAC Battlefield Forensics and Acquisition
Domain 1Objective 2
Computer Fundamentals GBFA Practice Questions (Page 2)
Part of the Foundations and Preparation domain, which makes up ~21% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~11–17 in this domain), expect 3–4 from this objective — we provide 38 practice questions to prepare you well beyond it. (estimate)
38questions here
8free pages
5concepts
Questions 6–10
- 6
A forensic analyst is examining a file that contains a series of 8-bit values. The analyst needs to determine the decimal value of a specific byte that is stored as 0xFF. What is the decimal equivalent?
Select an answer first - 7
An examiner is analyzing a disk image from a system that used a file system with a 4 KB cluster size. The examiner finds a file that is exactly 10 KB in size. How many clusters does the file occupy?
Select an answer first - 8
How many bits are in one byte?
Select an answer first - 9
Which computer hardware component is primarily responsible for executing instructions and performing arithmetic and logic operations?
Select an answer first - 10
A forensic analyst is examining a raw disk image and finds the byte sequence 0x50 0x4B 0x03 0x04 at the beginning of a file. This signature is commonly associated with which type of file?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GBFA” is a trademark of its owner, used for identification only.