Virtual Labs

Tools

Aim

Theory

Pretest

Procedure

Simulation

Posttest

References

Feedback

Aim

Theory

Pretest

Procedure

Simulation

Posttest

References

Feedback

Master File Table

Choose difficulty:

Beginner

Intermediate

Advanced

What is the primary role of the Master File Table (MFT) in the NTFS file system?

a: To manage network connections Explanation

Explanation

b: To store and track every file and directory on an NTFS volume Explanation

Explanation

c: To encrypt files Explanation

Explanation

d: To manage system memory Explanation

Explanation

Which type of data is typically stored in an Alternate Data Stream (ADS) in an NTFS file system?

a: File metadata Explanation

Explanation

b: Large media files Explanation

Explanation

c: Hidden or additional data associated with a file Explanation

Explanation

d: Operating system files Explanation

Explanation

What does the $DATA attribute in an MFT entry represent?

a: The security settings of the file Explanation

Explanation

b: The actual content of the file Explanation

Explanation

c: The file's creation date Explanation

Explanation

d: The file's access permissions Explanation

Explanation

What is a Resident File in NTFS?

a: A file whose content is stored directly within the MFT record Explanation

Explanation

b: A file stored on an external drive Explanation

Explanation

c: A file larger than 1 KB Explanation

Explanation

d: A system file protected by NTFS Explanation

Explanation

What happens when a file is non-resident in NTFS?

a: Its content is stored directly inside the MFT record Explanation

Explanation

b: The file is deleted automatically Explanation

Explanation

c: The $DATA attribute stores pointers to its external disk location Explanation

Explanation

d: It cannot have Alternate Data Streams Explanation

Explanation

Why are MFT attributes important for forensic analysis?

a: They help identify timestamp anomalies and recover deleted files Explanation

Explanation

b: They encrypt the file system Explanation

Explanation

c: They speed up file copying Explanation

Explanation

d: They manage user permissions exclusively Explanation

Explanation

Community Links Sakshat Portal Outreach Portal FAQ: Virtual Labs

AGPL 3.0 & Creative Commons (CC BY-NC-SA 4.0)