ReclaiMe Data Recovery Training

Filesystem Recovery Course - VMFS Recovery Test

Check what inode payload can store

file content for files less than 1 KB
up to 256 pointers to small clusters
up to 256 indirect block pointers
128 pointers to small clusters and 128 indirect block pointers
128 pointers to large clusters and 128 pointers to small clusters
up to 256 pointers to large clusters

What is the typical size of large cluster?

512 KB
4 MB
32 KB
1 MB

What does payload contain?

512 pointers to large clusters
256 pointers or file content
any file related data
up to 1024 pointers or file content

Where are the numbers of the first and the last segments stored?

in the extent header
in the volume header

How are large clusters numbered?

arbitrarily
sequentially from the beginning of the volume

What happens when a file is deleted?

payload in the corresponding inode is overwritten with zeros
an entire inode is overwritten with zeros
metadata in the corresponding inode is overwritten with zeros

Where are small clusters stored?

arbitrarily on the volume
in inodes
inside a special file

Where are inodes stored on a VMFS volume?

one copy in the beginning and other – in the end
in the beginning of the volume
in the end of the volume

VMFS stands for

virtual machine file structure
virtual machine file system
virtual machine file storage
volume manager file system

What is the size of segments on VMFS filesystem?

256 KB
512 KB
256 MB
512 MB

We have a mailing list in which we talk about interesting cases we encounter and share some tips and tricks.