GIAC
GCED · Question #27
You have been tasked with searching for Alternate Data Streams on the following collection of Windows partitions; 2GB FAT16, 6GB FAT32, and 4GB NTFS. How many total Gigabytes and partitions will you…
The correct answer is C. 6GBs of data, the FAT32 partition only. You've hit your limit · resets 1pm (America/New_York)
Data Protection and Incident Response
Question
You have been tasked with searching for Alternate Data Streams on the following collection of Windows partitions; 2GB FAT16, 6GB FAT32, and 4GB NTFS. How many total Gigabytes and partitions will you need to search?
Options
- A4GBs of data, the NTFS partition only.
- B12GBs of data, the FAT16, FAT32, and NTFS partitions.
- C6GBs of data, the FAT32 partition only.
- D10GBs of data, both the FAT32 and NTFS partitions.
How the community answered
(48 responses)- A4% (2)
- B2% (1)
- C94% (45)
Explanation
You've hit your limit · resets 1pm (America/New_York)
Topics
#alternate data streams#NTFS#file system forensics#FAT32
Community Discussion
No community discussion yet for this question.