CompTIA Security+ Question I-56

A security administrator needs to image a large hard drive for forensic analysis. Which of the following will allow for faster imaging to a second hard drive?

A. cp /dev/sda /dev/sdb bs=8k
B. tail -f /dev/sda > /dev/sdb bs=8k
C. dd in=/dev/sda out=/dev/sdb bs=4k
D. locate /dev/sda /dev/sdb bs=4k

Answer: C

Explanation:
dd is a command-line utility for Unix and Unix-like operating systems whose primary purpose is to convert and copy files. dd can duplicate data across files, devices, partitions and volumes On Unix, device drivers for hardware (such as hard disks) and special device files (such as /dev/zero and /dev/random) appear in the file system just like normal files; dd can also read and/or write from/to these files, provided that function is implemented in their respective driver. As a result, dd can be used for tasks such as backing up the boot sector of a hard drive, and obtaining a fixed amount of random data. The dd program can also perform conversions on the data as it is copied, including byte order swapping and conversion to and from the ASCII and EBCDIC text encodings. An attempt to copy the entire disk using cp may omit the final block if it is of an unexpected length; whereas dd may succeed. The source and destination disks should have the same size.

CompTIA A+ Core 2 Question G-79

A user has an external hard drive which they forget to unplug before booting their machine. Each time this happens, an error shows on the screen which states “Boot sector missing reboot to try again.” Which of the following would be the BEST way to resolve this?

A. Change BIOS options to remove floppy drive from the boot order
B. Change BIOS options to remove USB device from the boot order
C. Change BIOS options to remove CD drive from the boot order
D. Set the SATA setting in BIOS to AHCI from IDE

CompTIA A+ Core 2 Question E-4

A user has reported their computer boots into Windows install each time they power up their computer. Which of the following is the MOST likely cause of this problem?

A. An install disk was left in the multimedia drive.
B. The system is booting from the utility partition.
C. The system is booting PXE from the server.
D. The boot sector needs to be repaired.

Correct Answer: A