Summary EnCase Computer Forensics -- The Official EnCE EnCase Certified Examiner Study Guide Book cover image

Summary EnCase Computer Forensics -- The Official EnCE EnCase Certified Examiner Study Guide

- Steve Bunting
ISBN-10 0470901063 ISBN-13 9780470901069
0 Flashcards & Notes
Scroll down to see the PDF preview!
PLEASE KNOW!!! There are just 0 flashcards and notes available for this material. This summary might not be complete. Please search similar or other summaries.
  • This summary
  • +380.000 other summaries
  • A unique study tool
  • A rehearsal system for this summary
  • Studycoaching with videos
Remember faster, study better. Scientifically proven.
Trustpilot Logo

A snapshot of the summary - EnCase Computer Forensics -- The Official EnCE EnCase Certified Examiner Study Guide Author: Steve Bunting ISBN: 9780470901069

  • 1 Computer Hardware

  • 1.6 Review Questions Chapter 1

  • What is the definition of a CPU?

    A. The physical computer case that contains all its internal components
    B. The computer’s internal hard drive
    C. A part of the computer whose function is to perform data processing
    D. A part of the computer that stores and manages memory
    C A CPU is the central processing unit, a microprocessor that performs
         data processing, or interprets and executes instructions.
  • What is the definition of POST?

    A. A set of computer sequences the operating system executes upon a proper
        shutdown

    B. A diagnostic test of the computer’s hardware and software for presence and
        operability during the boot sequence prior to running the operating system

    C. A diagnostic test of the computer’s software for presence and operability
         during the boot sequence prior to running the operating system

    D. A diagnostic test of the computer’s hardware for presence and operability
         during the boot sequence prior to running the operating system
      D. POST (Power On Self-Test) is a diagnostic test of the computer’s hardware,
          such as the motherboard, memory, CD-ROM drive, and so forth. POST does
          not test the computer’s software
  • Is the information stored on a computer’s ROM chip lost during a proper shutdown?

    A. Yes
    B. No
    B. Information contained on a ROM chip, read-only memory, is not lost after the computer has been shut down.

    Read-only memory (ROM) is a type of non-volatile memory used incomputers and other electronic devices. Data stored in ROM can only be modified slowly, with difficulty, or not at all, so it is mainly used to storefirmware (software that is closely tied to specific hardware and unlikely to need frequent updates).
  • Can information stored in the BIOS ever change?

    A. Yes
    B. No
    A. Although not very common, information stored in the BIOS can change,
        such as when the BIOS needs to be upgraded to support new hardware.
  • What is the purpose or function of a computer’s ROM chip?

    A. Long-term or permanent storage of information and instructions
    B. Temporary storage area to run applications
    C. Permanent storage area for programs and files
    D. A portable storage device
    A. ROM (read-only memory) contains information about the computer, such as
        hardware configuration. Unlike RAM, the information is not lost once power is
        disconnected
  • Information contained in RAM memory (system’s main memory), which is located on the motherboard, is _________.

    A. Volatile
    B. Nonvolatile
    A. Information contained in RAM memory is considered volatile, which means that
        the data is lost after the computer has been disconnected
  • What is the maximum number of drive letters assigned to hard drive(s) partitions on a system?

    A. Four
    B. Sixteen
    C. Twenty-four
    D. Infinity
    C. The answer is 24 drive letters (C–Z), with drive letters A and B reserved
        for floppy drives.
  • The smallest area on a drive that data can be written to is a _______ while
    the smallest area on a drive that a file can be written to is a _______.

    A. Bit and byte
    B. Sector and cluster
    C. Volume and drive
    D. Memory and disk
    B. Data is written to sectors, and files are written to clusters.
  • The size of a physical hard drive can be determined by which of the following?

    A. Multiplying the cylinder x head x sector
    B. Multiplying the cylinder x head x sector x 512 bytes
    C. Multiplying the total LBA sectors times 512 bytes
    D. Adding the total size of partitions
    E. Both B and C
    E. Multiplying C/H/S gives the total amount of sectors in older systems if the
        number of sectors per track is constant. When it’s not, total LBA sectors
        give total sectors. Multiplying the total number of sectors from the
        appropriate method times 512 bytes per sector gives the total number
        of bytes for the physical drive. Adding up the total size of partitions does
        not include areas outside the partitions, such as Unused Disk Area.
  • 12. Which is not considered an output device?

    A. Monitor
    B. Printer
    C. CD-RW drive
    D. Speaker
    C. A CD-RW (rewritable) drive is both an input and output device, as opposed to a CD drive, which only reads and inputs data to the computer system.
PLEASE KNOW!!! There are just 0 flashcards and notes available for this material. This summary might not be complete. Please search similar or other summaries.
Read the full summary
This summary. +380.000 other summaries. A unique study tool. A rehearsal system for this summary. Studycoaching with videos.
  • Higher grades + faster learning
  • Don't study anything twice
  • 100% sure, 100% understanding
Discover Study Smart