Title: Module 8 Quiz
Course: CAP 2140 Digital Forensics > Section: Macintosh and Linux Boot Processes and File Systems

Q: Ext2fs can support disks as large as ____ TB and files as large as 2 GB.
- 4
- 8
- 10
- 12
A: 4

Q: Linux is unique in that it uses ____, or information nodes, that contain descriptive information about each file or directory.
- xnodes
- extnodes
- infNodes
- inodes
A: inodes

Q: Have you read the syllabus completely and thoroughly?
- Yes
- No
A: Yes

Q: Linux is probably the most consistent UNIX-like OS because the Linux kernel is regulated under the ____ agreement.
- AIX
- BSD
- GPL
- GRUB
A: GPL

Q: Do you accept all the items in the syllabus?
- Yes
- No
A: Yes

Q: The standard Linux file system is ____.
- NTFS
- Ext3fs
- HFS+
- Ext2fs
A: Ext2fs

Q: The final component in the UNIX and Linux file system is a(n) ____, which is where directories and files are stored on a disk drive.
- superblock
- data block
- boot block
- inode block
A: data block

Q: LILO uses a configuration file named ____ located in the /Etc directory.
- Lilo.conf
- Boot.conf
- Lilo.config
- Boot.config
A: Lilo.conf

Q: To find deleted files during a forensic investigation on a Linux computer, you search for inodes that contain some data and have a link count of ____.
- -1
- 0
- 1
- 2
A: 0

Q: ____ components define the file system on UNIX.
- 2
- 3
- 4
- 5
A: 4

Q: There are ____  tracks available for the program area on a CD.
- 45
- 50
- 99
- 100
A: 99

Q: The ____ provides several software drivers that allow communication between the OS and the SCSI component.
- International Organization of Standardization (ISO)
- Advanced SCSI Programming Interface (ASPI)
- CLV
- EIDE
A: Advanced SCSI Programming Interface (ASPI)

Q: Erich Boleyn created GRUB in ____ to deal with multiboot processes and a variety of OSs.
- 1989
- 1991
- 1994
- 1995
A: 1995

Q: On a Linux computer, ____  is the path for the first partition on the primary master IDE disk drive.
- /dev/sda1
- /dev/hdb1
- /dev/hda1
- /dev/ide1
A: /dev/hda1

Q: ____________________ is a journaling version of Ext2fs that reduces file recovery time after a crash.
A: Ext3fs

Q: The Macintosh file system has ____________________ descriptors for the end of file (EOF).
A: two / 2

Q: CD players that are 12X or faster read discs by using a(n) _____________________ system.
A: constant angular velocity (CAV) / constant angular velocity / CAV / CAV (constant angular velocity)

Q: When you turn on the power to a UNIX workstation, instruction code located in firmware on the system’s CPU loads into RAM. This firmware is called ____________________ code because it’s located in ROM.
A: memory-resident

Q: Explain the relation between allocation blocks and logical block on a Mac OS file system.

Q: Explain the use of forensic tools for Macintosh systems.