ReclaiMe Data Recovery Training

Filesystem Recovery Course - FAT Recovery Test

What is a cluster chain for the file the first cluster of which is 2?

2-5-3
2-5-3-6
2-3-5

Check what happens when a file is deleted on FAT filesystem

file's corresponding records in the FAT table are zeroed
first bytes of all the corresponding directory entries are replaced with EOF
file name is fully destroyed
all file clusters are zeroed
first bytes of all the corresponding directory entries are replaced with E5

What happens with a file name stored in the directory entry of the old format when the file is deleted?

the first character of the file name is destroyed
file name remains intact
the first two characters of the file name are destroyed
file name is fully destroyed

What is the main difference between FAT16 and FAT32

format of directory entries
number of bits in FAT entry
the number of FAT tables
the number of boot sectors

How many FAT directory entry formats exist?

three
two
one

How many characters are allowed to have in a file name within the old directory format?

up to 10 characters for file name and up to 3 for file extension
up to 256 characters
up to 8 characters for file name and up to 3 for file extension

Fragmented files cannot be recovered with high quality on FAT filesystem

false
true

What is a cluster chain for the file the first cluster of which is 4?

4-5-6-2-3
4-6-5-2-3
4-2-6-5-3
4-6-2-5-3

How many FAT tables can be on a FAT volume?

always 1
always 2
up to 4

Next lesson - VMFS recovery

We have a mailing list in which we talk about interesting cases we encounter and share some tips and tricks.