Deck 8: Macintosh and Linux Boot Processes and File Systems

Question 1

Macintosh OS X is built on a core called ____.

A) Phantom
B) Panther
C) Darwin
D) Tiger

Answer 1

C

Question 2

Linux is unique in that it uses ____, or information nodes, that contain descriptive information about each file or directory.

A) xnodes
B) extnodes
C) infNodes
D) inodes

Answer 2

D

Question 3

In older Mac OSs, a file consists of two parts: a data fork, where data is stored, and a ____ fork, where file metadata and application information are stored.

A) resource
B) node
C) blocks
D) inodes

Answer 3

A

Question 4

Under ISO 9660 for DVDs, the Micro-UDF (M-UDF) function has been added to allow for long filenames.

Question 5

On older Macintosh OSs all information about the volume is stored in the ____.

A) Master Directory Block (MDB)
B) Volume Control Block (VCB)
C) Extents Overflow File (EOF)
D) Volume Bitmap (VB)

Question 6

On Mac OSs, File Manager uses the ____ to store any information not in the MDB or Volume Control Block (VCB).

A) volume information block
B) extents overflow file
C) catalog
D) master directory block

Question 7

Older Macintosh computers use the same type of BIOS firmware commonly found in PC-based systems.

Question 8

Erich Boleyn created GRUB in ____ to deal with multiboot processes and a variety of OSs.

A) 1989
B) 1991
C) 1994
D) 1995

Question 9

LILO uses a configuration file named ____ located in the /Etc directory.

A) Lilo.conf
B) Boot.conf
C) Lilo.config
D) Boot.config

Question 10

To find deleted files during a forensic investigation on a Linux computer, you search for inodes that contain some data and have a link count of ____.

A) -1
B) 0
C) 1
D) 2

Question 11

If a file contains information, it always occupies at least one allocation block.

Question 12

With Mac OSs, a system application called ____ tracks each block on a volume to determine which blocks are in use and which ones are available to receive data.

A) Extents overflow file
B) Volume Bitmap
C) Master Directory Block
D) Volume Control Block

Question 13

Linux is probably the most consistent UNIX-like OS because the Linux kernel is regulated under the ____ agreement.

A) AIX
B) BSD
C) GPL
D) GRUB

Question 14

____ components define the file system on UNIX.

A) 2
B) 3
C) 4
D) 5

Question 15

The final component in the UNIX and Linux file system is a(n) ____, which is where directories and files are stored on a disk drive.

A) superblock
B) data block
C) boot block
D) inode block

Question 16

Ext2fs can support disks as large as ____ TB and files as large as 2 GB.

A) 4
B) 8
C) 10
D) 12

Question 17

The maximum number of allocation blocks per volume that File Manager can access on a Mac OS system is ____.

A) 32,768
B) 45,353
C) 58,745
D) 65,535

Question 18

The standard Linux file system is ____.

A) NTFS
B) Ext3fs
C) HFS+
D) Ext2fs

Question 19

GPL and BSD variations are examples of open-source software.

Question 20

A UNIX or Linux computer has two boot blocks, which are located on the main hard disk.

Question 21

Match each item with a statement below
a.File Manager
f.Volume
b.Inode blocks
g.ls
c.ISO 9660
h.Catalog
d.LILO
i.Finder
e.Clumps
Macintosh tool that works with the OS to keep track of files and maintain users' desktops

Question 22

Match each item with a statement below
a.File Manager
f.Volume
b.Inode blocks
g.ls
c.ISO 9660
h.Catalog
d.LILO
i.Finder
e.Clumps
the list command on Linux

Question 23

Match each item with a statement below
a.File Manager
f.Volume
b.Inode blocks
g.ls
c.ISO 9660
h.Catalog
d.LILO
i.Finder
e.Clumps
ISO standard for CDs

Question 24

Match each item with a statement below
a.File Manager
f.Volume
b.Inode blocks
g.ls
c.ISO 9660
h.Catalog
d.LILO
i.Finder
e.Clumps
any storage medium used to store files

Question 25

There are ____ tracks available for the program area on a CD.

A) 45
B) 50
C) 99
D) 100

Question 26

ATA-66,ATA-____, and ATA-133 can use the newer 40-pin/80-wire cable.

A) 70
B) 83
C) 96
D) 100

Question 27

The ____ provides several software drivers that allow communication between the OS and the SCSI component.

A) International Organization of Standardization (ISO)
B) Advanced SCSI Programming Interface (ASPI)
C) CLV
D) EIDE

Question 28

Match each item with a statement below
a.File Manager
f.Volume
b.Inode blocks
g.ls
c.ISO 9660
h.Catalog
d.LILO
i.Finder
e.Clumps
maintains relationships between files and directories on a volume on a Mac OS

Question 29

Match each item with a statement below
a.File Manager
f.Volume
b.Inode blocks
g.ls
c.ISO 9660
h.Catalog
d.LILO
i.Finder
e.Clumps
Mac OS utility that handles reading, writing, and storing data to physical media

Question 30

Before OS X, Macintosh uses the ____________________, in which files are stored in directories, or folders, that can be nested in other folders.

Question 31

IDE ATA controller on an old 486 PC doesn't recognize disk drives larger than 8.4 ____.

A) KB
B) MB
C) GB
D) TB

Question 32

Match each item with a statement below
a.File Manager
f.Volume
b.Inode blocks
g.ls
c.ISO 9660
h.Catalog
d.LILO
i.Finder
e.Clumps
groups of contiguous allocation blocks

Question 33

All Advanced Technology Attachment (ATA) drives from ATA-33 through ATA-133 IDE and EIDE disk drives use the standard ____ ribbon or shielded cable.

A) 40-pin
B) 60-pin
C) 80-pin
D) 120-pin

Question 34

The Macintosh file system has ____________________ descriptors for the end of file (EOF).

Question 35

____________________ is a journaling version of Ext2fs that reduces file recovery time after a crash.

Question 36

When you turn on the power to a UNIX workstation, instruction code located in firmware on the system's CPU loads into RAM. This firmware is called ____________________ code because it's located in ROM.

Question 37

On a Linux computer, ____ is the path for the first partition on the primary master IDE disk drive.

A) /dev/sda1
B) /dev/hdb1
C) /dev/hda1
D) /dev/ide1

Question 38

CD players that are 12X or faster read discs by using a(n) _____________________ system.

Question 39

Match each item with a statement below
a.File Manager
f.Volume
b.Inode blocks
g.ls
c.ISO 9660
h.Catalog
d.LILO
i.Finder
e.Clumps
older Linux boot manager utility

Question 40

Match each item with a statement below
a.File Manager
f.Volume
b.Inode blocks
g.ls
c.ISO 9660
h.Catalog
d.LILO
i.Finder
e.Clumps
the first data after the superblock on a UNIX or Linux file system

Question 41

What is a continuation inode?

Question 42

What are the functions of the superblock on a UNIX or Linux file system?

Question 43

What is a bad block inode on Linux?

Question 44

Explain the use of forensic tools for Macintosh systems.

Question 45

What problems can hidden partitions on IDE devices cause to forensic investigators?

Question 46

Explain the problems you can encounter with pre-ATA-33 devices when connecting them to current PCs.

Question 47

Describe the CD creation process.

Question 48

Explain the use of B*-trees on Mac OS 9 file system.

Question 49

Write a brief history of SCSI.

Question 50

Explain the relation between allocation blocks and logical block on a Mac OS file system.