EC-Council: Computer Hacking Forensic Investigator(CHFI-V10) |
||||
Module 3 : Understanding Hard Disks and File Systems |
||||
| Questions available : 89 |
You are not logged in. Please Login for track your learning progress |
|||
| Go to Question No. | |||
Question No 0
If you want to share the link of this question, please click here to "Copy Question Link" and share that generated link. Link from URL may change in future.
Comunity Comments:
Banwari on 15/05/2025Opted Answer: C
MBR found at the very first sector (sector 0) of storage device, fundamental role in the boot process and contains key data required for system startup.
Master Boot Code – Contains executable instructions responsible for booting the system and transferring control to the operating system.
Partition Table – Stores information about the disk partitions, including details like size, location, and the active boot partition. If the Partition Table is corrupted or missing, the system may fail to recognize or access stored data.
Signature Word – A unique identifier (typically 0x55AA) placed at the end of the MBR/VBR to confirm that the disk is bootable & MBR is valid.
Without this signature, the system may not recognize the disk as bootable, potentially leading to startup failures.
Without a valid MBR, a computer cannot properly recognize partitions or initiate the boot sequence. This structure is commonly used in older systems, while newer storage devices often use GUID Partition Table (GPT) instead.
The Volume Boot Record (VBR), also known as a partition boot sector, is a specialized boot sector found on a partitioned storage device. ensuring that the operating system within a partition can be properly initialized.
When a system starts up, the Master Boot Code reads the Partition Table to identify where the bootable operating system is located, allowing the boot process to proceed correctly.
It then transfers control to the boot loader, which continues the process of loading the operating system into memory.
Essentially, it (Master Boot Code) acts as the first stage of booting—without it, the system wouldn’t know how to proceed after power-up.
The boot loader is a crucial program that initializes the computer system and loads the operating system into memory when the device starts. The boot loader plays an essential role in the boot process by locating the OS kernel and transferring control to it.
There are two main stages of boot loaders:
First-stage boot loader – Initializes key hardware components such as the CPU, motherboard, and memory.
Second-stage boot loader – Loads the operating system and hands over execution to it.
Boot loaders can be stored in different locations, typically in the Master Boot Record (MBR) or the Volume Boot Record (VBR). Some well-known examples of boot loaders include BIOS, UEFI, GNU GRUB, BOOTMGR, and Syslinux.
Disk Signature helps operating systems distinguish between different storage devices and ensures proper data access.
Each disk receives a signature during initialization, and this identifier is used by the system to track and manage disks.
Krishna on 20/03/2025Opted Answer: C
Signature word (0x55AA) is located at the last two bytes of the MBR and helps the system recognize the disk as bootable