ReclaiMe Data Recovery Training
Home
RAID
Partition
Filesystem
NAS
Tricks
Contact
About us
Filesystem Recovery Course - File Storage Basics Test
Check properties a file required to have
content
name
data and time of file creation
access rights
size
Check optional properties for a file
content
access rights
file extension
data and time of file creation
name
size
What is carving?
discovering files by searching the disk by file names
discovering files by searching the disk by file hashes
discovering files by searching the disk by file header signatures
What is a compressed file?
a file containing zeros which are not actually stored on the disk
a file containing more than two identical blocks
a file consisting of more than one fragment
a file containing fragments stored on disk in compressed form
What is a sparse file?
a file consisting of more than one fragment
a file containing a compressed block
a file containing zeros which are not actually stored on the disk
a file containing more than two identical blocks
What is a minimum unit of disk space a physical device operates with?
chunk
cluster
sector
stripe
What is a minimum unit of disk space a filesystem operates with?
chunk
stripe
sector
cluster
Check filesystem features which facilitate data recovery
journaling
checksums
deduplication
compression
fragmentation
copy-on-write
How is a record storing file metadata and pointers to file content called in Linux?
short form directory
inode
directory
group descriptor
MFT record
indirect block table
Check what makes carving impossible
checksums
deduplication
sparse storage
copy-on-write
compression
journaling
fragmentation
Next lesson - File Metadata
Copyright © 2013 - 2021
www.ReclaiMe.com
We have a mailing list
in which we talk about interesting cases we encounter and share some tips and tricks.