Font size
WorksheetsCO2517
Total questions: 25
Worksheet time: 22mins
Which of these are parts of a non-SSD Hard drive? (select 3)
Actuator
Platter
Head
Cell
Memory Module
Reorder these in order of size, starting with the smallest
byte
sector
cluster
track
This addressing scheme means you are limited to 8Gb disck size - due to its need to declare which cylinder, which head and which sector to access.
LBA
CHS
MBR
Which of these is NOT part of an SSD?
Controller
Nand memory
Arm
Arrays
In which order does a PC boot up?
POST
Reading Hard drive MBR
Processing the Partition Table
Loading a bootable partition
Loading VBR
What does POST stand for and what does it do?
Power on System Technology. Provides power to the PC.
Preventative on Start Task. Prevents unauthorised alteration before OS.
Power on Self Test. BIOS self-diagnostic on hardware prior to use.
Pre-Operating System Test. Assessed the hard drive is malware free.
What does MBR mean?
Master Boot Record
Mirror Back Reduction
Matrix Bound Record
Make Boot Readable
Which of these records are expected at the start of Sector 0?
MBR
VBR
NBP
SSD
Does the MBR contain boot code that instructs the BIOS what to do with any partitions within the hard drive?
Yes
No
The MBR can have the following areas? Select 3
Boot Code
A Partition Table
A Signature Value
End of File Declarations
Boot Flags
In which order would you expect to find these within an MBR?
Boot Code
Partition Table
Partition Records
Signature Value
Which of these MBR is correctly arranged?
Arrange these elements of the partition table in the correct order.
Boot Flag - can this partition be booted from ?
Start CHS - what is the starting address of this partition
Partition Type - NTFS,FAT32, Linux, etc.
Start LBA - Starting address of this partition in LBA format
What is the purpose of the Boot Code in the MBR?
The boot code identifies the capacity of the drive.
The boot code identifies the bootable partition
The boot code checks for viruses
The boot code tells the OS when the hard drive is faulty.
Once the CPU has been informed of a location of a bootable partition, the CPU reads the first sector of that address for what?
the VBR - Volume Boot Record
the VBR - Volume Based Register
The MBR - Master Boot Record
The Partition Record
The Volume Boot Record does not hold which of these? Select one
The number of sectors per cluster
The location of the root directory (the start of the OS instructions)
The boot loader
the partition type
Why are boot records often at the boundaries of a cylinder? i.e MBR starts at sector 0 , VBR at sector 63 etc?
Historical - no real need
Gives the head time to move
Edges are closer to the arms
The cylinder is quicker to access
Which of these is not a partition type?
Primary
Extended
Logical
Open
This time of partition is written into the MBR, but there can only be 4 of these type declared.
(a)
This type of partition cannot store data but is used to itself create other partition information
(a)
Recap: Put these in the right order
Preparation
Detection & Analysis
Containment Eradication & Recovery
Post-Incident Activity
Which of these describes an Incident Response Plan
Describes how to maintain operations during and after an indicent
Provides a clear guide on exactly what to do during an data breach.
Outlines the processes involved in declaring a disaster and ensuring continuity of business operations
Tracks the movement of evidence throughout the investigation
Match the following to its purpose
IR programme mission
Why this incident need to be managed
What goals are aimed for
Objectives of the IR
IR Scope
Policy limitations
Roles and Responsibilities
Critical actors in the response.
IR procedures need to be up-to-date and relevant to the business and technical environment. How can we ensure the IR Team are able to do this?
(a)
An event is (a) in a computer system.
Whilst a incident is (b) for organisation or individuals.
