nerdexam
IISFA

II0-001 · Question #123

Which of the following represents the data found at a NTFS hard drive, and lasts for 3 bytes?

The correct answer is B. Jump Instruction. Jump Instruction (B) occupies the first 3 bytes of the NTFS Boot Sector (typically EB 52 90), directing the CPU to skip over the BPB metadata and execute the actual boot code - exactly 3 bytes, no more. Why the distractors are wrong: A. OEM ID - also found in the NTFS boot…

Question

Which of the following represents the data found at a NTFS hard drive, and lasts for 3 bytes?

Options

  • AOEM ID
  • BJump Instruction
  • CBPD
  • DEnd of sector marker

How the community answered

(28 responses)
  • A
    4% (1)
  • B
    75% (21)
  • C
    14% (4)
  • D
    7% (2)

Explanation

Jump Instruction (B) occupies the first 3 bytes of the NTFS Boot Sector (typically EB 52 90), directing the CPU to skip over the BPB metadata and execute the actual boot code - exactly 3 bytes, no more.

Why the distractors are wrong:

  • A. OEM ID - also found in the NTFS boot sector, but it occupies 8 bytes (the string "NTFS "), not 3.
  • C. BPB (BIOS Parameter Block) - follows the OEM ID and spans many more bytes (25+ bytes), storing volume geometry like sector size and cluster count.
  • D. End of sector marker - is only 2 bytes (0x55 0xAA), located at the very end of the boot sector, not 3 bytes.

Memory tip: Think of the boot sector as a letter - the Jump Instruction is the "stamp" (small, 3 bytes, comes first), the OEM ID is the "return address" (slightly larger, 8 bytes), and the BPB is the letter's body (the bulk of the metadata). Three bytes = the tiny stamp that kicks off execution.

Community Discussion

No community discussion yet for this question.

Full II0-001 Practice