Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

digital forensics (2022) > Module 7 Quiz > Flashcards

Module 7 Quiz Flashcards

1
Q

Which of the following is the main challenge in acquiring an image of a system running macOS?

The macOS is incompatible with most write-blockers.

Most commercial software doesn’t support macOS.

Vendor training is needed.

None of the above

A

Vendor training is needed.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Which of the following certifies when an OS meets UNIX requirements?

The Open Group

SUSE Group

UNIX Users Group

IEEE

A

The Open Group

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

In Linux, which of the following is the home directory for the superuser?

super

/home/superuser

root

home

A

root

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

On most Linux systems, current user login information is in which of the following locations?

/var/log/usr

/var/log/wmtp

/var/log/dmesg

/var/run/utmp

A

/var/run/utmp

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Which of the following Linux system files contains hashed passwords for the local system?

/var/log/dmesg

/var/log/syslog

/etc/passwd

/etc/shadow

A

/etc/shadow

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

The Linux Ext4 file system added support for partitions larger than 16 TB.

True

False

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

How does macOS reduce file fragmentation?

By using clumps

By using clusters

By using 128 bit sectors

By using 256 bit sectors

A

By using clumps

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

To recover a password in macOS, which tool do you use?

PRTK

Finder

Keychain Access

Password Access

A

Keychain Access

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Data blocks contain actual files and directories and are linked directly to inodes.

True

False

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Which of the following describes the superblock’s function in the Linux file system?

Manages the file system, including configuration information

Contains links between inodes

Stores bootstrap code

All of the above

A

Manages the file system, including configuration information

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Which of the following describes plist files?

You must have a special editor to view them.

They require special installers.

They’re found only in Linux file systems.

None of the above

A

You must have a special editor to view them.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Linux is the only OS that has a kernel.

True

False

A

False

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Which of the following is a new file added in macOS?

/var/db/diagnostics

/var/db/uuid.text

Either of the above

None of the above

A

Either of the above

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Hard links work in only one partition or volume.

True

False

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Hard links are associated with which of the following?

Hidden files

An absolute path to a file

Dot notation

A specific inode

A

A specific inode

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

The Disk Arbitration feature in macOS is used to disable and enable automatic mounting when a drive is connected via a USB or FireWire device.

True

False

A

True

17
Q

The data fork stores a file’s actual data, however, and the resource fork contains file metadata and application information.

True

False

A

True

digital forensics (2022) (18 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions