Mod 4 · Les 5/5
In progress
Module 4•Lesson 5 of 5•⏱️ 10 min read•Beginner+39 XP
Quiz — Disk
10 APPLY items on Autopsy, filesystem cues, and deleted recovery on $DFIR_LAB.
Quiz — Disk• Audio Walkthrough
00:00/00:49
Disk and Filesystem — Module Quiz
Ten APPLY items. Name disk analysis literacy on YOUR $DFIR_LAB — never unauthorized imports, planted evidence, or CoC skips. Original Cyberlium. Next: Memory Literacy.
Practice QuizQuestion 1
Multiple choiceQ1
APPLY: Autopsy literacy helps by:
Practice QuizQuestion 2
True or FalseQ2
APPLY: True or False: MFT is an NTFS filesystem structure.
Practice QuizQuestion 3
Multiple choiceQ3
APPLY: Deleted file recovery may use:
Practice QuizQuestion 4
Multiple choiceQ4
APPLY: Tutorial imports live victim E01 — you:
Practice QuizQuestion 5
Multiple choiceQ5
APPLY: Planting then recovering files is:
Practice QuizQuestion 6
Multiple choiceQ6
APPLY: Filesystem cue card should include:
Practice QuizQuestion 7
Multiple choiceQ7
APPLY: Cyberlium NEVER allows:
Practice QuizQuestion 8
True or FalseQ8
APPLY: True or False: SSD TRIM can limit deleted data recovery.
Practice QuizQuestion 9
Multiple choiceQ9
APPLY: chmod 600 on disk notes means:
Practice QuizQuestion 10
Multiple choiceQ10
APPLY: Next module after this quiz:
Answer 10 practice quiz questions to unlock XP reward. (0/10 answered)
Skip quiz & read next →