Prepare well before appearing any Interview, i will appreciate if readers post answer of following question voluntarily
Lets share our Knowledge
- What is MBR.
- What is VBR.
- Differnce between data carving and recovery.
- Data carving in SSD is possible or not , please define reason as well.
- Bootloaders.
- Types of Bootloader.
- What is POST(Power on self test).
- Some times they may ask about Bootprocess.
- Differnce between IP4 and IPv6.
- I have a 16GB USB drive with FAT32 file system, i am not able to copy 6 GB file , why ?
- Types of connectors.
- SATA and SCSI differnce.
- RAID drives and their Imaging.
- EDRM model.
- Difference between DD and E01.
- Types encryption techniques.
- Which Hashing mechanism used in Encase and FTK ?
- What is MD5 ?
- Difference between SHA and MD5.
- What is Boot sector ?
- Explain Bootstrapping ?
- Which is better SHA or MD5 and why ?
- Maximum size of a sector(512 bytes)
- minimum size of sector(64 bytes)
- How much maximum HDD size can be supported by MBR(2 TB) ?
- What is GPT ?
- Maximum size supported by GPT.
- Which file system is used by Unix OS(Unix finle system).
- Maximum file size supported by Unix file system.
- Difference between encase and FTK.
- Write blockers.
- **if you claim that you know mobile forensic then remember about tools and techniques.
- Which toughest forensic challenge you came across so far.
- What is name of windows boot loader ?
- Which version of encase or FTK you have been used ?
- DD command syntax.
- If you claim that you are expert in DISK or mobile or network, application or database forensic, then interviewer may ask
What are the potential artifacts found DISK or mobile or network or application or database - FDISK or DISKPART command in cmd.
- Types of Hard Drive(ATA,SATA,SCSI,SSD).
- What is Difference between SATA and SSD ?
- Difference between SCSI and SATA ?
All The Best
we try our best in our posts but if there are any point of improvement we will appreciate that if anyone correct us or give some valuable suggestions