Quiz on Module 07: Linux and Macintosh File Systems

Which part of a file structure stored on an Apple file system is designed to store data?

a. Data fork

b. Resource fork

c. Meta fork

d. System fork

a. Data fork

Which part of a file structure stored on an Apple file system is designed to store metadata?

a. Data fork

b. Resource fork

c. Meta fork

d. System fork

b. Resource fork

To recover a password in macOS, which tool do you use?

a. Finder

b. Password Recovery Toolkit

c. Keychain Access

d. Spotlight

c. Keychain Access

Which of the following is true about the use of hard links? (Choose all that apply.)

a. Files are protected from file updates.

b. Files with the same inode can be updated by different users.

c. Files do not have to be shared to be updated by a different user.

d. Files can only be deleted by one of the users.

b. Files with the same inode can be updated by different users.

c. Files do not have to be shared to be updated by a different user.

Which of the following Linux system files contains hashed passwords for the local system?

a. /var/log/dmesg

b. /etc/passwd

c. /var/log/syslog

d. /etc/shadow

d. /etc/shadow

Which of the following describes the superblock's function in the Linux file system? (Choose all that apply.)

a. Stores bootstrap code

b. Specifies the disk geometry and available space

c. Manages the file system, including configuration information

d. Tracks inodes by using the inode tables

b. Specifies the disk geometry and available space

c. Manages the file system, including configuration information

d. Tracks inodes by using the inode tables

In Linux, which of the following is the home directory for the superuser?

a. /home

b. /root

c. /super

d. /home/superuser

b. /root

Which of the following organizations certifies when an OS meets UNIX requirements?

a. IEEE

b. UNIX Users Group

c. The Open Group

d. SUSE Group

c. The Open Group

On most Linux systems, current user login information is in which of the following locations?

a. /var/log/dmesg

b. /var/log/wmtp

c. /var/log/usr

d. /var/log/utmp

c. /var/log/usr

Which of the following describes plist files?

a. You must have a special editor to view them.

b. They are found only in Linux file systems.

c. They are preference files for applications.

d. They require special installers.

c. They are preference files for applications.

Data blocks contain actual files and directories and are linked directly to inodes. True or False?

a. True

b. False

a. True

Which of the following items should a digital forensics examiner collect before attempting the acquisition of a macOS device with an APFS with encryption enabled? (Choose all that apply.)

a. Custodian's username

b. Custodian's password

c. System administrator's username

d. System administrator's password

e. Custodian's mother's family name

f. Custodian's mother's date of birth

g. System administrator's place of birth

h. System administrator's favorite color

a. Custodian's username

b. Custodian's password

c. System administrator's username

d. System administrator's password