In DriveSpy, which format correctly specifies a copy of 150 sectors starting at sector 1709 on the primary hard drive?

Prepare for the Computer Hacking Forensic Investigator v11 exam. Study with flashcards and multiple choice questions. Each question includes hints and explanations. Get exam-ready efficiently!

Multiple Choice

In DriveSpy, which format correctly specifies a copy of 150 sectors starting at sector 1709 on the primary hard drive?

Explanation:
The format to specify a sector copy in DriveSpy is driveNumber:startingSector, numberOfSectors. Here, 0 represents the primary drive, so 0:1709, 150 means copy 150 sectors starting at sector 1709 on the first drive. This matches the requirement exactly. The other formats either refer to the wrong drive (1 would be the second drive), start at the wrong sector (1000 instead of 1709), or use a dash to denote a range (1709-1858), which is not the syntax DriveSpy uses for specifying the length.

The format to specify a sector copy in DriveSpy is driveNumber:startingSector, numberOfSectors. Here, 0 represents the primary drive, so 0:1709, 150 means copy 150 sectors starting at sector 1709 on the first drive. This matches the requirement exactly.

The other formats either refer to the wrong drive (1 would be the second drive), start at the wrong sector (1000 instead of 1709), or use a dash to denote a range (1709-1858), which is not the syntax DriveSpy uses for specifying the length.

Subscribe

Get the latest from Passetra

You can unsubscribe at any time. Read our privacy policy