ReclaiMe Data Recovery Training
Home
RAID
Partition
Filesystem
NAS
Tricks
Contact
About us
Filesystem Recovery Course - File Storage Basics Test
What is carving?
discovering files by searching the disk by file hashes
discovering files by searching the disk by file names
discovering files by searching the disk by file header signatures
What is a minimum unit of disk space a filesystem operates with?
sector
stripe
cluster
chunk
How is a record storing file metadata and pointers to file content called in Linux?
inode
group descriptor
MFT record
short form directory
directory
indirect block table
What is a compressed file?
a file containing fragments stored on disk in compressed form
a file containing more than two identical blocks
a file containing zeros which are not actually stored on the disk
a file consisting of more than one fragment
Check properties a file required to have
content
access rights
data and time of file creation
size
name
A filesystem, if possible, tries to allocate clusters sequentially
false
true
Check filesystem features which facilitate data recovery
checksums
fragmentation
compression
copy-on-write
journaling
deduplication
Check optional properties for a file
name
data and time of file creation
size
content
access rights
file extension
How does deduplication work?
a filesystem compresses data before writing it to the disk
a filesystem monitors that no more than two copies of each data block is stored
a filesystem monitors that exactly one copy of each data block is stored
a filesystem monitors that exactly one copy of each file metadata block is stored
What is an alternative name for cluster?
block
sector
stripe
chunk
Next lesson - File Metadata
Copyright © 2013 - 2018
www.ReclaiMe.com
We have a mailing list
in which we talk about interesting cases we encounter and share some tips and tricks.