nerdexam
GIAC

GCFA · Question #65

You work as the Network Administrator for McNeil Inc. The company has a Unix-based network. You want to allow direct access to the filesystems data structure. Which of the following Unix commands can

The correct answer is B. debugfs. The debugfs command is the correct tool for directly accessing and inspecting ext2/ext3/ext4 filesystem data structures on Unix/Linux systems.

Advanced Mac & Linux Forensics

Question

You work as the Network Administrator for McNeil Inc. The company has a Unix-based network. You want to allow direct access to the filesystems data structure. Which of the following Unix commands can you use to accomplish the task?

Options

  • Adu
  • Bdebugfs
  • Cdf
  • Ddosfsck

How the community answered

(22 responses)
  • A
    5% (1)
  • B
    82% (18)
  • C
    5% (1)
  • D
    9% (2)

Why each option

The debugfs command is the correct tool for directly accessing and inspecting ext2/ext3/ext4 filesystem data structures on Unix/Linux systems.

Adu

The du command reports disk usage statistics for files and directories but does not provide direct access to the filesystem's internal data structures.

BdebugfsCorrect

debugfs is an interactive filesystem debugger for ext2, ext3, and ext4 filesystems that provides direct read and write access to filesystem internal data structures, including inodes, directories, and superblocks. It is specifically designed for low-level filesystem inspection and manipulation, making it the right tool for direct filesystem data structure access. Other commands like du and df only report high-level usage statistics without exposing internal structures.

Cdf

The df command displays disk space usage for mounted filesystems at a high level and cannot access or manipulate filesystem data structures directly.

Ddosfsck

dosfsck is a tool for checking and repairing FAT/MS-DOS filesystems, not for accessing the internal data structures of Unix ext-based filesystems.

Concept tested: Unix filesystem debugging with debugfs

Source: https://linux.die.net/man/8/debugfs

Topics

#debugfs#Unix filesystem#filesystem data structure#Linux commands

Community Discussion

No community discussion yet for this question.

Full GCFA Practice