lecture 2

Question 1

What does RAID stand for

Answer 1

Redundant Array of independent disks

Question 2

what is a cylinder

Answer 2

A set of tracks located at the same position on each disk platter.

Question 3

what is a head

Answer 3

The read/write heads for each platter surface.

Question 4

what is a sector

Answer 4

Subdivisions of a track, representing the smallest unit of storage

Question 5

what can CHS do in forensics

Answer 5

• Disk imaging and recovery
• data integrity
• partitioning and boot analysis

Question 6

what is CHS addressing

Answer 6

All data could be addressed by which side of which disk it is on (Head), which track it is located on (Cylinder) and where on that track (Sector)

Question 7

what does LBA stand for

Answer 7

logical block addressing

Question 8

How Big is a block in an LBA

Answer 8

HDD-512xLBA=Size

Question 9

what is Hashing?

Answer 9

A deterministic, one-way process, that can take 0 to unlimited byes of data and produce a code.

Input data: banana
Resulting Hash: 72b302bf297a228a75730123efef7c41

If we take a Raw Disk Image and run a hash over it, we will be given a value that ‘proves’ every time we run the hash that the data has not been modified.