Digital Forensics Quiz 5

A__is a column of tracks on two or more disk platters

• track

• cylinder

• sector

• head

When Microsoft introduced Widows 2000, it added built-in encryption to NTFS called__

• EFS

• VFAT

• LZH

• RAR

__recovers encrypted files with EFS if there's a problem with the user's original private key

• Administrator certificate

• Certificate escrow

• Root certificate

• Recovery certificate

A file is stored on cluster addresses or__in a drive's partition on a file/folder's MFT record.

• metada

• virtual runs

• data runs

• metaruns

In the NTFS MFT,all files & folders are stored in separate records of__bytes each

• 1024

• 1512

• 2048

• 2512

Records in the MFT are referred to as__

• hyperdata

• metadata

• infodata

• inodes

On an NTFS disk,immediately after the Partition Boot Sector is the__

• MBR

• FAT

• MFT

• HPFS

Was introduced when Microsoft created Windows NT & is the primary file system for Windows Vista

• VFAT

• FAT32

• HPFS

• NTFS

__is the file structure database that Microsoft originally designed for floppy disks

• FAT

• VFAT

• FAT32

• NTFS

When Microsoft created Windows 95,it consolidated initialization on (.ini) files into the__

• Metadata

• Inidata

• IniRecord

• Registry