ReclaiMe Data Recovery Training

RAID Recovery Course - Overall Test

Look at the picture on the right and guess the possible RAID level

RAID10
Full RAID5
RAID 5 with a missing disk
Full RAID 5 with a hotspare

What is the correct order of the content analysis stages in ReclaiMe Pro?

mirror analysis, ratio of zeros, parity analysis
parity analysis, ratio of zeros, mirror analysis
ratio of zeros, mirror analysis, parity analysis

What is the first step in RAID recovery?

RAID configuration recovery
mirror analysis
entropy analysis
collecting all the information available about the case

Is it possible to recover data if one of the member disks in a RAID5 failed?

yes, all data is recoverable
yes, but only part of the data is recoverable
no
depends on which disk failed

Is it possible to recover data form a RAID0 in which one of the member disks failed?

yes, all the data can be recovered
yes, but only half of the data can be recovered
no, for all practical purposes it is impossible since all you get are files no larger than block size

Check what you can do with entropy analysis

spot the disks which do not form a parity-based array
notice that start offset doesn't equal zero
detect the first disk in the RAID
spot the disks which do not belong to the RAID in question

What does content analysis help determine?

disk order
RAID level
block size

Is it possible to recover data if one of the member disks in a RAID10 failed?

depends on which disk failed
no
yes, all data is recoverable
yes, but only part of the data is recoverable

When to apply parity analysis?

between zero and mirror analysis
after zero and mirror analysis
after entropy analysis
before zero and mirror analysis

If data recovered from a RAID is incorrect it means that

RAID configuration recovery failed
filesystem recovery failed
both filesystem or RAID recovery might fail, investigation is needed

Return to the list of lessons

We have a mailing list in which we talk about interesting cases we encounter and share some tips and tricks.