ReclaiMe Data Recovery Training

RAID Recovery Course - Overall Test

Is it possible to recover data form a RAID0 in which one of the member disks failed?

no, for all practical purposes it is impossible since all you get are files no larger than block size
yes, but only half of the data can be recovered
yes, all the data can be recovered

What is the first step in RAID recovery?

collecting all the information available about the case
mirror analysis
RAID configuration recovery
entropy analysis

Look at the picture on the right and choose the most complete configuration

full 4-disk RAID5, 32 KB block size
full 4-disk RAID5, 16 KB block size
4-disk RAID5 with one disk missing, 32 KB block size
full 4-disk RAID5, 64 KB block size

Is it possible to recover data if one of the member disks in a RAID5 failed?

yes, all data is recoverable
yes, but only part of the data is recoverable
no
depends on which disk failed

Look at the picture on the right and guess the possible RAID level

Full RAID5
Full RAID 5 with a hotspare
RAID 5 with a missing disk
RAID10

Is it possible to recover data if one of the member disks in a RAID10 failed?

depends on which disk failed
no
yes, all data is recoverable
yes, but only part of the data is recoverable

When to apply entropy analysis?

after content analysis
before content analysis
between zero and mirror analysis

What is the recommended approach to check the quality of RAID recovery

check large files, larger than several block sizes
folder tree check is enough
check many small files, smaller or equal to block size

What information about RAID you can get just by looking at the disks in Disk Management?

idea about RAID level
idea about first disk
block size

If data recovered from a RAID is incorrect it means that

filesystem recovery failed
RAID configuration recovery failed
both filesystem or RAID recovery might fail, investigation is needed

Return to the list of lessons

We have a mailing list in which we talk about interesting cases we encounter and share some tips and tricks.