Chapter 7 Quiz
In Linux most system configuration files are stored in the _____ directory.
/etc
On a Linux computer, _____ represents file systems exported to remote hosts.
/etc/exports
Sleuth Kit's Web browser interface
Autopsy
What type of blocks does a UNIX/ Linux computer only have one of?
Boot block
Capitalization, or lack thereof, makes no difference with UNIX and Linux commands.
Data
The early standard Linux file system was _______.
Ext2
On Man OSs, the ____ stores any file information not in the MDB or Volume Control Block (VCB).
Extents overflow file
Both the resource fork and the data contain essential information, such as filename, file size, and data modified, for each file.
False
Linux is a certified UNIX operating system.
False
macOS is built with the new Apple File System (APFS). The current version offers better security, encryption, and performance speeds, but users can't mount HFS+ drives.
False
On Mac OS X systems, what utility can be used to encrypt/ decrypt a user's home directory?
FileVault
_____ components define the file system on UNIX/Linux.
Four
A node that stores information about the B* tree file
Header node
The ______ command can be used to see network interfaces.
Ifconfig
A B* -tree node that stores link information to the previous and next nodes.
Index node
_____ contain files and directory metadata and provide a mechanism for linking data stored in data blocks
Inodes
Linux distribution that contains several forensics tools
Kali Linux
The term ____ is often used when discussing Linux because technically, Linux is only the core of the OS.
Kernel
The bottom-level nodes of the B* -tree that contain actual file data in the Mac file system
Leaf node
What command below will create a symbolic link to a file?
Ln -g
In macOS, volume have allocation blocks and ____ blocks.
Logical
A B* -tree node that stores a node descriptor and map record
Map Node
On older Mac Oss all information about the volume is stored in the ________.
Master Directory Block (MDB)
With _____, Macintosh oved to the Intel processor and became UNIX based.
OS X
Commercial forensics for analyzing UNIX and Linux file system
OSForensics
All of the following are advantages of open-source software EXCEPT _____.
Requires a high level of user skill
In older versions of maOS, a file consists of two parts; a data fork, where data is stored, and a ____ fork, where file metadata and application information's are stored
Resource
In macOS, the ____ fork typically contains data the user creates.
Shadow
What file under the /etc folder contains the hashed passwords for a local system?
Shadow
A free Linux forensics tool
Sleuth Kit
Before OS x, the Hierarchical File System (HFS) was used, in which file share stored in directories (folder) that can be in other directories.
True
The data fork also reads and writes information from applications such as Microsoft Word and Excel.
True
The pipe (I) character redirects the output of the command preceding it.
True
With Mac OS, a system application called _____ tracks each block on a volume to determine which blocks are in use and which ones are available to receive data.
Volume Bitmap
If a file contains information, it always occupies at least one allocation block.
true
