EnCE EnCase Computer Forensics: The Official EnCase Certified Examiner Study Guide, 3rd Edition

Review Questions

The word “FAT” applies to FAT12, FAT16, and FAT32 file systems, unless exFAT is specifically mentioned.

1. On a FAT file system, FAT is defined as which of the following?

A. A table consisting of master boot record and logical partitions

B. A table created during the format that the operating system reads to locate data on a drive

C. A table consisting of filenames and file attributes

D. A table consisting of filenames, deleted filenames, and their attributes

2. How does a corrupted sector located in the data area of a hard drive affect the corresponding cluster number on a FAT in a FAT file system?

A. It does not affect ...