GIAC
GCFE · Question #13
What role does the Master Boot Record (MBR) play in a forensic investigation of a storage device?
The correct answer is C. It holds information on partition layout and boot sequence. See the full explanation below for the reasoning.
Question
What role does the Master Boot Record (MBR) play in a forensic investigation of a storage device?
Options
- AIt stores file system permissions
- BIt logs system crashes and failures
- CIt holds information on partition layout and boot sequence
- DIt tracks user login attempts
How the community answered
(23 responses)- A4% (1)
- B9% (2)
- C83% (19)
- D4% (1)
Community Discussion
No community discussion yet for this question.