Computer Hacking Forensic Investigator (CHFI v10) — Question 153
What value of the "Boot Record Signature" is used to indicate that the boot-loader exists?
Answer options
- A. AA55
- B. 00AA
- C. AA00
- D. A100
Correct answer: A
Explanation
The correct answer, AA55, is the standard value that denotes a valid boot-loader in a Master Boot Record (MBR). The other options do not represent the recognized signature for boot-loaders, making them incorrect.