You are using DriveSpy, a forensic tool and want to copy 150 sectors where the starting sector is 1709 on the primary hard drive. Which of the following formats correctly specifies these sectors?

The correct answer is B. 0:1709, 150. DriveSpy uses the syntax format: [drive number]:[starting sector], [number of sectors]. Drive numbering starts at 0, so the primary hard drive is drive 0. The starting sector is 1709 and the copy spans 150 sectors. This gives the format '0:1709, 150'. Option A uses the wrong…

Submitted by katya_ua· Apr 18, 2026Disk Forensics

Question

Options

A0:1000, 150
B0:1709, 150
C1:1709, 150
D0:1709-1858

How the community answered

(36 responses)

A
6% (2)
B
89% (32)
C
3% (1)
D
3% (1)

Explanation

DriveSpy uses the syntax format: [drive number]:[starting sector], [number of sectors]. Drive numbering starts at 0, so the primary hard drive is drive 0. The starting sector is 1709 and the copy spans 150 sectors. This gives the format '0:1709, 150'. Option A uses the wrong starting sector (1000). Option C uses drive number 1 (the secondary drive). Option D uses a range notation (1709-1858) rather than the correct count notation. Therefore, B (0:1709, 150) correctly identifies drive 0, starting sector 1709, copying 150 sectors.

Topics

#Disk Imaging#Sector Addressing#Forensic Tools

Community Discussion

No community discussion yet for this question.

Full 312-49 Practice