John, a system administrator at a growing e-commerce company, is tasked with configuring a RAID 5 array to support the company's increasing data storage needs. He needs to set up the array using…

Question

Options

• AParity data is stored on one drive, with no redundancy.
• BParity data is distributed across all drives in the array.
• CParity data is mirrored across two drives.
• DParity data is stored on a dedicated parity drive.

• A
  2% (1)
• B
  79% (38)
• C
  13% (6)
• D
  6% (3)

Explanation

According to the CHFI v11 Digital Evidence and Storage Fundamentals, RAID (Redundant Array of Independent Disks) configurations are critical for investigators to understand because they directly impact data availability, fault tolerance, and evidence reconstruction during forensic analysis. RAID 5 is one of the most commonly deployed RAID levels in enterprise environments due to its balance between performance, storage efficiency, and redundancy. In a RAID 5 configuration, data and parity information are striped across all disks in the array. This means that parity blocks are not stored on a single dedicated drive; instead, parity is rotated among all participating drives. This design eliminates the bottleneck associated with a single parity disk and improves read performance while still providing fault tolerance. If one drive fails, RAID 5 uses the distributed parity information along with the remaining data blocks to reconstruct the missing data on-the-fly, ensuring continued access to information. From a forensic perspective, this distributed parity mechanism is significant because investigators must correctly identify the RAID structure to rebuild the array and recover digital evidence accurately.

No community discussion yet for this question.