ReclaiMe Data Recovery Training

Filesystem Recovery Course - FAT Recovery Test

Check what happens when a file is deleted on FAT filesystem

first bytes of all the corresponding directory entries are replaced with EOF
first bytes of all the corresponding directory entries are replaced with E5
file's corresponding records in the FAT table are zeroed
all file clusters are zeroed
file name is fully destroyed

What is the main difference between FAT32 and exFAT

the number of boot sectors
format of directory
the number of FAT tables

How many characters are allowed to have in a file name within the old directory format?

up to 8 characters for file name and up to 3 for file extension
up to 256 characters
up to 10 characters for file name and up to 3 for file extension

How many bits exFAT uses in FAT entry?

16
28
32

How many FAT directory entry formats exist?

three
one
two

How many boot sectors can be on a FAT volume?

always 1
1 or 2
at least two

What changes are made to FAT table when a file is deleted?

no changes are made until new files are written
file's corresponding records are zeroed
no changes are made

Where is a root directory usually stored on FAT?

in the last cluster of data area
between a boot sector and FAT tables
in the first cluster of data area

Fragmented files cannot be recovered with high quality on FAT filesystem

true
false

Next lesson - VMFS recovery

We have a mailing list in which we talk about interesting cases we encounter and share some tips and tricks.