ExamTopics Logo
Mail Us[email protected]
Menu
Eccouncil Discussions
exam questions

Exam 312-49v10 All Questions

View all questions & answers for the 312-49v10 exam
Go to Exam

Exam 312-49v10 topic 1 question 806 discussion

Actual exam question from ECCouncil's 312-49v10
Question #: 806
Topic #: 1
[All 312-49v10 Questions]

A computer forensics investigator is analyzing a hard disk drive (HDD) that is suspected to contain evidence of criminal activity. The HDD has 20,000 cylinders, 16 heads, and 63 sectors per track, with each sector having 512 bytes. During the analysis, the investigator discovered a file of 1.5KB in size on the disk. How many sectors are allocated for the file, and what could be the consequences of such allocation for the investigation?

  • A. 2 sectors; the file might be fragmented, making it harder to retrieve
  • B. 4 sectors; it may cause inefficiency in space utilization on the disk
  • C. 3 sectors; it may increase the retrieval time due to increased sector overhead
  • D. 3 sectors; the file might be fragmented, making it harder to retrieve
Show Suggested Answer Hide Answer
Suggested Answer: B 🗳️
by Elb at May 29, 2024, 2:43 p.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
044f354
3 days, 8 hours ago
Selected Answer: D
File size = 1.5 KB = 536 bytes Sector size = 512 bytes Therefore: 1536 bytes ÷ 512 bytes = 3  sectors Option Sector Count Technical Accuracy Forensic Relevance Verdict A ❌ 2 (too few) Math error Valid concern ❌ B ❌ 4 (too many) Misleading claim Not applicable ❌ C ✅ 3 Correct count Misplaced concern ❌ D ✅ 3 Correct count Valid concern ✅
upvoted 1 times
...
4bd3116
8 months, 1 week ago
Selected Answer: D
Fragmentation
upvoted 2 times
...
db902ec
9 months, 3 weeks ago
Selected Answer: C
1.5KB = 1.5 * 1024 bytes = 1536 bytes Since each sector is 512 bytes, we calculate the number of sectors required to store 1536 bytes: Number of sectors = 1536 bytes / 512 bytes per sector = 3 sectors C makes the most amount of sense
upvoted 2 times
044f354
3 days, 8 hours ago
overhead is not a forensics concern here Best answer is option D
upvoted 1 times
...
...
Elb
10 months ago
Selected Answer: A
1.5kB = 1500 bytes / 512 bytes per sector = 2.9296875 sectors
upvoted 1 times
044f354
3 days, 8 hours ago
Sectors are enumerated using whole numbers only. not fractions or decimal portions. Best answer is D
upvoted 1 times
...
...
Elb
10 months ago
C > It is an important determinant of the time taken for accessing data. As the hard disk uses bits for disk or data management, the overhead size must be minimized to maximize efficiency. A file on a disk stores data in a contiguous series for optimal space usage, while the system allocates sectors for the file according to its size.
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago