26. Digital Forensics Quiz

What is the primary focus of digital forensics?

• Recovering electronic information

• Designing secure networks

• Analyzing physical evidence

• Creating new software

What is the first step in the lab after logging into the Kali Linux machine?

• Analyzing inodes

• Running FSStat

• Unzipping files

• Mounting the CD drive

Which command is used to analyze drive partitions?

• FSStat

• FDISK

• FIWalk

• TestDisk

What does the FDISK utility reveal about the fourth partition?

• It is a primary partition

• It is an extended partition

• It is a logical partition

• It is a hidden partition

What tool is used to recover hidden partitions?

• FIWalk

• TestDisk

• FSStat

• FDISK

What additional information does FIWalk provide?

• File system type

• Partition size

• Drive encryption status

• Metadata about files

What command is used to force FSStat to determine the file system type?

• FDISK

• TestDisk

• FIWalk

• FSStat -F

What does the MMLS command provide?

• File metadata

• Partition start and end points

• Drive encryption status

• File system type

What is the purpose of interacting with inodes?

• To determine file system type

• To recover deleted files

• To gather metadata about files

• To mount the drive

What is the significance of converting the drive into a virtual disk?

• To perform further analysis

• To determine file system type

• To mount it on another system

• To recover deleted files