Question

1.
2.
3.
4.
Answer (Detailed Solution Below)

Option 1 : ext4 mounted in data=journal mode, because this mode journals data blocks as well as metadata

Advertisement

Detailed Solution

सही उत्तर ext4 mounted in data=journal mode, because this mode journals data blocks as well as metadata है।

Key Points
Helpful?
PrepSnapprepsnap.in • Part -A

Question:

After a crash, an examiner hopes to reconstruct a file's actual content from filesystem journal data. On which setup is this possible? / क्रैश के बाद परीक्षक फाइलसिस्टम जर्नल डेटा से फाइल की वास्तविक सामग्री पुनर्निर्मित करना चाहता है। किस सेटअप पर यह संभव है?

1.
ext4 mounted in data=journal mode, because this mode journals data blocks as well as metadata
2.
NTFS, because the $LogFile permanently stores copies of all file contents
3.
FAT32, because its file allocation table acts as a full data journal
4.
No journaling filesystem, because journals never store file content under any mode

Correct Answer: ext4 mounted in data=journal mode, because this mode journals data blocks as well as metadata

Only ext4's data=journal mode writes file data into the journal; NTFS $LogFile and ext4's default ordered mode journal metadata only. / सिर्फ ext4 का data=journal मोड फाइल डेटा जर्नल में लिखता है; NTFS $LogFile सिर्फ मेटाडेटा जर्नल करता है। Option (b) is the trap — $LogFile is a short circular metadata journal, not a content archive.

Downloaded from PrepSnap (prepsnap.in)