A snapshot of the summary - EnCase Computer Forensics -- The Official EnCE EnCase Certified Examiner Study Guide
1 Computer Hardware
1.6 Review Questions Chapter 1
What is the definition of a CPU?
A. The physical computer case that contains all its internal components
B. The computer’s internal hard drive
C. A part of the computer whose function is to perform data processing
D. A part of the computer that stores and manages memoryC. A CPU is the central processing unit, a microprocessor that performs
data processing, or interprets and executes instructions.
What is the definition of POST?
A. A set of computer sequences the operating system executes upon a proper
B. A diagnostic test of the computer’s hardware and software for presence and
operability during the boot sequence prior to running the operating system
C. A diagnostic test of the computer’s software for presence and operability
during the boot sequence prior to running the operating system
D. A diagnostic test of the computer’s hardware for presence and operability
during the boot sequence prior to running the operating systemD. POST (Power On Self-Test) is a diagnostic test of the computer’s hardware,
such as the motherboard, memory, CD-ROM drive, and so forth. POST does
not test the computer’s software
Is the information stored on a computer’s ROM chip lost during a proper shutdown?
B. NoB. Information contained on a ROM chip, read-only memory, is not lost after the computer has been shut down.
Read-only memory (ROM) is a type of non-volatile memory used incomputers and other electronic devices. Data stored in ROM can only be modified slowly, with difficulty, or not at all, so it is mainly used to storefirmware (software that is closely tied to specific hardware and unlikely to need frequent updates).
Can information stored in the BIOS ever change?
B. NoA. Although not very common, information stored in the BIOS can change,
such as when the BIOS needs to be upgraded to support new hardware.
What is the purpose or function of a computer’s ROM chip?
A. Long-term or permanent storage of information and instructions
B. Temporary storage area to run applications
C. Permanent storage area for programs and files
D. A portable storage deviceA. ROM (read-only memory) contains information about the computer, such as
hardware configuration. Unlike RAM, the information is not lost once power is
Information contained in RAM memory (system’s main memory), which is located on the motherboard, is _________.
B. NonvolatileA. Information contained in RAM memory is considered volatile, which means that
the data is lost after the computer has been disconnected
What is the maximum number of drive letters assigned to hard drive(s) partitions on a system?
D. InfinityC. The answer is 24 drive letters (C–Z), with drive letters A and B reserved
for floppy drives.
The smallest area on a drive that data can be written to is a _______ while
the smallest area on a drive that a file can be written to is a _______.
A. Bit and byte
B. Sector and cluster
C. Volume and drive
D. Memory and diskB. Data is written to sectors, and files are written to clusters.
The size of a physical hard drive can be determined by which of the following?
A. Multiplying the cylinder x head x sector
B. Multiplying the cylinder x head x sector x 512 bytes
C. Multiplying the total LBA sectors times 512 bytes
D. Adding the total size of partitions
E. Both B and CE. Multiplying C/H/S gives the total amount of sectors in older systems if the
number of sectors per track is constant. When it’s not, total LBA sectors
give total sectors. Multiplying the total number of sectors from the
appropriate method times 512 bytes per sector gives the total number
of bytes for the physical drive. Adding up the total size of partitions does
not include areas outside the partitions, such as Unused Disk Area.
12. Which is not considered an output device?
C. CD-RW drive
D. SpeakerC. A CD-RW (rewritable) drive is both an input and output device, as opposed to a CD drive, which only reads and inputs data to the computer system.
- Higher grades + faster learning
- Don't study anything twice
- 100% sure, 100% understanding