Digital Forensics Quiz 7

Macintosh OS X is built on a core called__

• Darwin

• Phantom

• Panther

• Tiger

In older Mac OS, a file consists of a data fork(stored data) &__fork(file metadata & app info)

• blocks

• resource

• node

• inodes

The max no of allocation blocks per volume that File Manager can access on a Mac OS system is__

• 32,768

• 45,353

• 58,745

• 65,535

On older Mac OSs all info about the volume is stored in the__

• Extents Overflow File(EOF)

• Volume Bitmap(VB)

• Volume Control Block(VCB)

• Master Directory Block(MDB)

With MAC OS,__tracks each block on a volume to know which blocks are used & which are available

• Master Directory Block

• Volume Control Block

• Volume Bitmap

• Extents overflow file

On Mac OSs,File Manager uses the__to store any info not in the MDB or Volume Control Block(VCB)

• catalog

• volume information block

• extents overflow file

• master directory block

Linux is the most consistent UNIX-like OS because its kernel is regulated under the__agreement

• AIX

• GPL

• BSD

• GRUB

The standard Linux file system is__

• NTFS

• HFS+

• Ext3fs

• Ext2fs

Ext2fs can support disks as large as__TB & files as large as 2GB

• 4

• 8

• 10

• 12

Linux is unique in that it uses__(info nodes) that contain descriptive info abt each file/dir

• inodes

• xnodes

• infNodes

• extnodes