EnCE EnCase Computer Forensics: The Official EnCase Certified Examiner Study Guide, 3rd Edition

Review Questions

1. How many sector(s) on a hard drive are reserved for the master boot record (MBR)?

A. 1

B. 4

C. 16

D. 62

E. 63

2. The very first sector of a formatted hard drive that contains an operating system is referred to as which of the following?

A. Absolute sector 0

B. Boot sector

C. Containing the master boot record (MBR)

D. All of the above

3. How many logical partitions does the partition table in the master boot record allow for a physical drive?

A. 1

B. 2

C. 4

D. 24

4. The very first sector of a partition is referred to as which of the following?

A. Master boot record

B. Physical sector 0

C. Active primary partition

D. Volume boot record

5. If a hard drive has been fdisked, EnCase can still recover the deleted partition(s), if ...