Week 4 - File Systems

Question 1

What are file systems?

Answer 1

A system in place to organise the data storage of a device.

Question 2

When you take an image of a disk that has a file system what will happen?

Answer 2

You get an image of the file system.

Question 3

What kind of search do file systems facilitate?

Answer 3

Logical search

Question 4

What issues do file systems cause in the search process?

Answer 4

File systems can obsure hidden data. Any data that is not available to the OS cannot be viewed in the file system, including slack space, bad blocks, unallocated data and HPA.

Question 5

A analyst should try to understand the nature of the orginisation of a file system to…

Answer 5

simplify the task fo extracting data from a disk.

Question 6

TRUE OR FALSE: There is a fast way of extracting data from a file system, partition, directory or file from an image, without having to mount the device.

Answer 6

TRUE.