Lab 5 2 replacing a laptop drive

The preview shows page 1 - 2 out of 2 pages.

Lab 5 Memory and Mobile Device ForensicsLab 5 - Memory and Mobile Device ForensicsObjectivesAnalyze a suspicious executable without running it to assist in deciding whetherit is malicious or not.Analyze a suspicious document without opening it to assist in deciding whetherit is malicious or not.Pre-LabFor this lab, you'll need your Windows VM with internet connectivity.BackgroundFor this lab, we're expanding upon basic disk imaging of a suspicious system. Ifthe situation warrants, a memory capture can be performed to grab anything inmemory on the system and be analyzed in case malware or suspicious activities donot leave file system traces. As they say, malware has to run, but it can'thide...Additionally in this lab, we'll review a basic "dump" of a mobile device as wellas analyze network traffic captured from a mobile device using a specificapplication.

Upload your study docs or become a

Course Hero member to access this document

End of preview. Want to read all 2 pages?

Upload your study docs or become a

Course Hero member to access this document

Question 1 The arrow in the image identifies the __________.

Answer: Actuator

Question 2 The arrow in the image identifies the drive __________.

Answer: Spindle

Question 3 The arrow in the image identifies the __________.

Answer: Platters

Question 4 The arrow in the image identifies the __________.

Answer: Heads

Question 5

Identify the drive components that holds the magnetic information. Click the arrow pointing to the component.

Answer: Platters

Question 6

Identify the drive component that controls the rotation of the platters. Click the arrow pointing to the component.

Answer: Spindle

Question 7

Identify the drive component that writes to the data to the disk. Click the arrow pointing to the component.

Answer: Heads

Question 8

Identify the hard drive component that controls the read-write heads. Click the arrow pointing to the component.

Answer: Actuator

Page 2

Step 1

Step 2

Step 3

Step 4

Step 5

Step 6

Question 1 What is the approximate size of the disk you are replacing?

Answer: 2.5"

Question 2 What is the spindle speed of the drive that is being replaced?

Answer: 5400

Question 3 What is the capacity of the drive being replaced?

Answer: 500GB

Question 4 What is the spindle speed of the replacement drive?

Answer: None of these

Question 5 What connection type was used to transfer the data from the laptop to the hard drive dock?

Answer: USB 3.0

Question 6 Your 5 disk RAID-5 volume has experienced a drive failure. The volume will continue to operate until you replace the drive. When you replace the drive the volume will be rebuilt using __________ information stored on the other drives.

Answer: Parity

Question 7 You notice that your RAID 5 configuration makes a chattering sound during read/write operations. This is normal, as the data is being written across all drives in the array. This morning during boot you hear a loud clicking noise. Your Raid UFEI/BIOS program indicates that one of the drives _____________.

Answer: is about to fail or has failed.