ReclaiMe Data Recovery Training
Home
RAID
Partition
Filesystem
NAS
Tricks
Contact
About us
Filesystem Recovery Course - File Storage Basics Test
What is a compressed file?
a file containing zeros which are not actually stored on the disk
a file consisting of more than one fragment
a file containing fragments stored on disk in compressed form
a file containing more than two identical blocks
Check what makes carving impossible
sparse storage
compression
fragmentation
deduplication
journaling
checksums
copy-on-write
What is fragmentation?
when a file is stored in several non-contiguous fragments
when two files have identical fragments
How is a record storing file metadata and pointers to file content called in Linux?
group descriptor
short form directory
directory
inode
indirect block table
MFT record
Check filesystem features which facilitate data recovery
fragmentation
compression
journaling
deduplication
copy-on-write
checksums
Check optional properties for a file
file extension
content
name
data and time of file creation
size
access rights
What is carving?
discovering files by searching the disk by file names
discovering files by searching the disk by file hashes
discovering files by searching the disk by file header signatures
How does deduplication work?
a filesystem compresses data before writing it to the disk
a filesystem monitors that exactly one copy of each file metadata block is stored
a filesystem monitors that exactly one copy of each data block is stored
a filesystem monitors that no more than two copies of each data block is stored
A filesystem, if possible, tries to allocate clusters sequentially
false
true
Check properties a file required to have
content
name
access rights
size
data and time of file creation
Next lesson - File Metadata
Copyright © 2013 - 2019
www.ReclaiMe.com
We have a mailing list
in which we talk about interesting cases we encounter and share some tips and tricks.