nerdexam
GIAC

GCFA · Question #270

You work as the Network Administrator for McNeil Inc. The company has a Unix-based network. You want to print the super block and block the group information for the filesystem present on a system…

The correct answer is D. dumpe2fs. The dumpe2fs command displays superblock and block group descriptor information for ext2/ext3/ext4 filesystems on Unix/Linux systems.

Advanced Mac & Linux Forensics

Question

You work as the Network Administrator for McNeil Inc. The company has a Unix-based network. You want to print the super block and block the group information for the filesystem present on a system. Which of the following Unix commands can you use to accomplish the task?

Options

  • Ae2fsck
  • Bdump
  • Ce2label
  • Ddumpe2fs

How the community answered

(28 responses)
  • A
    7% (2)
  • B
    11% (3)
  • C
    4% (1)
  • D
    79% (22)

Why each option

The dumpe2fs command displays superblock and block group descriptor information for ext2/ext3/ext4 filesystems on Unix/Linux systems.

Ae2fsck

e2fsck is a filesystem integrity check and repair tool used to detect and fix inconsistencies, not to print superblock or block group data.

Bdump

dump is a backup utility that creates archive copies of filesystem contents and is unrelated to displaying superblock metadata.

Ce2label

e2label reads or sets the volume label of an ext2/ext3/ext4 filesystem and does not display superblock or block group descriptor information.

Ddumpe2fsCorrect

dumpe2fs reads the on-disk ext2/ext3/ext4 filesystem metadata and prints detailed superblock parameters (block size, inode count, mount count, etc.) and per-block-group descriptor tables, directly fulfilling the requirement to print superblock and block group information.

Concept tested: Unix ext filesystem superblock inspection with dumpe2fs

Source: https://linux.die.net/man/8/dumpe2fs

Topics

#dumpe2fs#Unix filesystem#superblock#block group info

Community Discussion

No community discussion yet for this question.

Full GCFA Practice