Quiz — Disk

10 APPLY items on Autopsy, filesystem cues, and deleted recovery on $DFIR_LAB.

10 min+40 XP10 quiz

Module progress5 of 5

Opening

Disk and Filesystem — Module Quiz

Ten APPLY items. Name disk analysis literacy on YOUR $DFIR_LAB — never unauthorized imports, planted evidence, or CoC skips. Original Cyberlium. Next: Memory Literacy.

Knowledge Check

APPLY: Autopsy literacy helps by:

Multiple choice

Knowledge Check

APPLY: True or False: MFT is an NTFS filesystem structure.

True or False

Knowledge Check

APPLY: Deleted file recovery may use:

Multiple choice

Knowledge Check

APPLY: Tutorial imports live victim E01 — you:

Multiple choice

Knowledge Check

APPLY: Planting then recovering files is:

Multiple choice

Knowledge Check

APPLY: Filesystem cue card should include:

Multiple choice

Knowledge Check

APPLY: Cyberlium NEVER allows:

Multiple choice

Knowledge Check

APPLY: True or False: SSD TRIM can limit deleted data recovery.

True or False

Knowledge Check

APPLY: chmod 600 on disk notes means:

Multiple choice

Knowledge Check

APPLY: Next module after this quiz:

Multiple choice

← Previous

Answer all 10 knowledge checks to continue. (0/10 answered)

Guest mode — log in to track XP