SK0-004 · Question #839
Users report accessing a volume on the server is very slow. The server is located in a department break room. A network administrator checks the problem and determines one of the hard drives from…
The correct answer is D. Since a RAID 5 array stripes the data evenly over all the drives, no information could be. A stolen RAID 5 drive does not expose recoverable data because the array stripes data fragments across all drives. A single drive alone contains no complete files or meaningful information.
Question
Users report accessing a volume on the server is very slow. The server is located in a department break room. A network administrator checks the problem and determines one of the hard drives from the RAID 5 array has been stolen, and the array contains PII data. The Chief Executive Officer (CEO) wants to know which data is likely to be available to the thief. Which of the following should be the network administrator's response?
Options
- ASince a RAID 5 array uses parity, all the data on the drive could be recovered.
- BSince the drive contains RAW data from a broken array, some data could be recovered with
- CSince the drive contains a duplicate of the other drives, all the data on the array will be
- DSince a RAID 5 array stripes the data evenly over all the drives, no information could be
How the community answered
(31 responses)- A6% (2)
- B13% (4)
- C32% (10)
- D48% (15)
Why each option
A stolen RAID 5 drive does not expose recoverable data because the array stripes data fragments across all drives. A single drive alone contains no complete files or meaningful information.
RAID 5 parity is used to reconstruct a failed drive using the remaining drives in the array; it does not replicate all data onto each individual drive, so one stolen drive does not contain the full dataset.
While forensic tools may read raw sectors, RAID 5 striping means only partial, fragmented pieces of files exist on any single drive, making meaningful data recovery from one drive alone impractical.
Containing a full duplicate of all other drives describes RAID 1 mirroring, not RAID 5, which uses distributed striping with parity rather than full duplication.
RAID 5 distributes data by striping it in chunks evenly across all member drives, with parity also distributed across the array. A single stolen drive contains only raw, discontiguous data fragments - without the remaining drives to reconstruct the stripes, no complete files or meaningful PII can be recovered from the isolated drive alone.
Concept tested: RAID 5 data striping and single drive exposure
Source: https://learn.microsoft.com/en-us/windows-server/storage/storage-spaces/storage-spaces-fault-tolerance
Topics
Community Discussion
No community discussion yet for this question.