nerdexam
GIAC

GCFA · Question #68

You work as a Network Administrator for uCertify Inc. You want to edit the MSDOS.SYS file, in your computer, from the DOS prompt. You are unable to find the file. What is the most likely cause?

The correct answer is D. It is a hidden file. MSDOS.SYS carries the hidden and system file attributes, causing it to be invisible in a standard DOS directory listing without special flags.

File System & Registry Forensics

Question

You work as a Network Administrator for uCertify Inc. You want to edit the MSDOS.SYS file, in your computer, from the DOS prompt. You are unable to find the file. What is the most likely cause?

Options

  • AIt is a read-only file.
  • BIt is a built-in command in the COMMAND .COM file.
  • CSomeone has deleted the file.
  • DIt is a hidden file.

How the community answered

(48 responses)
  • A
    4% (2)
  • B
    8% (4)
  • C
    2% (1)
  • D
    85% (41)

Why each option

MSDOS.SYS carries the hidden and system file attributes, causing it to be invisible in a standard DOS directory listing without special flags.

AIt is a read-only file.

Read-only status prevents writing to a file but does not hide it from directory listings, so a read-only file would still be visible at the DOS prompt.

BIt is a built-in command in the COMMAND .COM file.

MSDOS.SYS is a standalone file on disk, not a built-in command embedded within COMMAND.COM, and this would not explain why the file is unfindable.

CSomeone has deleted the file.

Deletion is possible but is not the most likely cause; the file is present by default on DOS/Windows systems and is protected by its system attribute, making accidental deletion uncommon.

DIt is a hidden file.Correct

MSDOS.SYS is a core DOS/Windows system file that has both the Hidden (H) and System (S) attributes set, which prevents it from appearing in a standard DIR command output. To view or access it, the administrator must use DIR /AH or ATTRIB to reveal hidden files, or clear the hidden attribute first before editing.

Concept tested: Hidden and system file attributes in DOS/Windows

Source: https://support.microsoft.com/en-us/topic/description-of-the-msdos-sys-file-in-windows-9x-2c670a7f-ce16-3f7d-53c3-72f4e4b13e5d

Topics

#MSDOS.SYS#hidden files#DOS system files#Windows artifacts

Community Discussion

No community discussion yet for this question.

Full GCFA Practice