ReclaiMe Data Recovery Training
Home
RAID
Partition
Filesystem
NAS
Tricks
Contact
About us
Filesystem Recovery Course - File Storage Basics Test
What is an alternative name for cluster?
chunk
block
stripe
sector
What is carving?
discovering files by searching the disk by file names
discovering files by searching the disk by file hashes
discovering files by searching the disk by file header signatures
How is a record storing file metadata and pointers to file content called in Linux?
MFT record
indirect block table
group descriptor
directory
inode
short form directory
Check optional properties for a file
data and time of file creation
content
access rights
file extension
size
name
What is a sparse file?
a file containing zeros which are not actually stored on the disk
a file containing a compressed block
a file containing more than two identical blocks
a file consisting of more than one fragment
A filesystem, if possible, tries to allocate clusters sequentially
false
true
Check filesystem features which facilitate data recovery
checksums
copy-on-write
journaling
deduplication
fragmentation
compression
Check what makes carving impossible
journaling
compression
checksums
copy-on-write
deduplication
fragmentation
sparse storage
What is a compressed file?
a file containing fragments stored on disk in compressed form
a file containing zeros which are not actually stored on the disk
a file containing more than two identical blocks
a file consisting of more than one fragment
What is a minimum unit of disk space a physical device operates with?
sector
cluster
stripe
chunk
Next lesson - File Metadata
Copyright © 2013 - 2022
www.ReclaiMe.com
We have a mailing list
in which we talk about interesting cases we encounter and share some tips and tricks.