Reference no: EM132344679
Assignment: Solve the given multiple choice questions:
1. During the Linux boot sequence, which file controls initialization?
a. /etc/lilo.conf
b. /etc/init.d
c. /etc/inittab
d. /etc/init.d/inittab
2. What command should you run to see the computer name and Linux version?
a. sysver -a
b. ls -v
c. uname --version
d. uname -a
3. What is the first step in the bootup sequence for Linux?
a. loading the kernel
b. loading the init file
c. detecting the hard drives
d. configuring the boot loader
4. What should an investigator use to extract artifacts from a memory sample?
a. strings
b. grep
c. dd
d. crash
5. Which Linux command copies data from an input file or device to an output file or device and can be used to make an image of a hard disk?
a. file
b. mount
c. sfdisk
d. dd
6. Which Linux command is used to calculate a hash value for a given file?
a. nc
b. dd
c. md5sum
d. file -hash
7. Which Linux command should be used after disk /dev/hda has been filled with zeros and before it is formatted with the ext3 file system?
a. dcfldd if=/dev/zero of=/dev/hda
b. fdisk /dev/hda
c. mkfs -t ext3 /dev/hda
d. mount /dev/hda
8. Which Linux command should you use to determine whether a connection exists with an FTP server?
a. mount
b. nc
c. grep
d. dd
9. Which Linux utility searches files for instances of an expression or pattern?
a. grep
b. find
c. dd
d. file
10. Which of the following is a bootable version of an operating system that is stored on removable media?
a. Bootable OS
b. Live CD
c. Forensic CD
d. Live OS
11. Match each item with a statement below.
a. the first sector of a data storage device that contains the code for bootstrapping a system
b. a set of duplicate data that is stored in a temporary location to allow rapid access for computers to function more efficiently
c. the smallest logical storage unit on a hard disk
d. a program that allows the operating system of a computer to communicate with a hardware device attached to the computer
e. any occurrence that the operating system or a program wants to keep track of or alert the user about
f. the principal part of an operating system that loads first and is stored in physical memory
g. the first sector of a data storage device such as a hard disk
h. the directory where a device is attached
i. a logical connection that allows data to be sent from one application to another directly
j. a space on a hard disk used as the virtual memory extension of a computer's random access memory
12. On a hard disk, what do tracks consist of, each of which usually stores 512 bytes?
a. platters
b. cylinders
c. sectors
d. clusters
13. To view information about TCP and UDP connections, along with their state, which command should you use?
a. nbtstat
b. net view
c. ipconfig
d. netstat
14. What are areas of a disk that have become unusable?
a. bad cylinders
b. bad sectors
c. broken platters
d. crashed heads
15. What are the concentric circles on platters where all the information is stored?
a. Sectors
b. Cylinders
c. Heads
d. Tracks
16. What are the round, flat, magnetic metal or ceramic disks in a hard disk that hold the actual data?
a. Disk sectors
b. Disk tracks
c. Disk platters
d. Disk cylinders