Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

Windows > 5 - Windows File Systems and Logging > Flashcards

5 - Windows File Systems and Logging Flashcards

1
Q

When was the FAT file system initially used?

A

The File Allocation Table (FAT) was initially used on PC operating systems such as MS-DOS and early versions of Windows.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Name 3 advantages of the FAT file system.

A
  1. It is simple
  2. It is robust
  3. It offers good performance, especially in embedded applications
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

The FAT system is made up of four sectors.

Describe what the Boot Sector contains.

A

Boot Sector - Contains startup code.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

The FAT system is made up of four sectors.

Describe what the File Allocation Table contains.

A

File Allocation Table - This contains the data map. There are also multiple entries for redundancy.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

The FAT system is made up of four sectors.

Describe what the Root Directory contains.

A

Root Directory - Stores information about the files and directories which are located in the root directory.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

The FAT system is made up of four sectors.

Describe what the File Data Region contains.

A

File Data Region - The actual stored data.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Name the 3 versions of FAT file systems.

A
  1. FAT12
  2. FAT16
  3. FAT32
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What is the FAT file system named for?

A

The FAT file system is named for its method of organization, the file allocation table, which resides at the beginning of the volume.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

How many copies of the File Allocation Table are kept?

A

To protect the volume, two copies of the table are kept, in case one becomes damaged.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

The file allocation tables and the root folder must be stored in a fixed location.

[True/False]

A

TRUE.

Note: the file allocation tables and the root folder must be stored in a fixed location so that the files needed to start the system can be correctly located.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What is NTFS an acronym for?

A

New Technology File System

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What is the maximum file size for FAT32?

A

4 GB

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What is the maximum file size for NTFS?

A

256 TB

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Name 4 improvements of the NTFS files system over its predecessors.

A
  1. Sparse file support
  2. Disk usage quotas
  3. Hard links
  4. File-level encryption
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What is the function of the Master File Table (MFT)?

A

The master file table (MFT) keeps track of all files, directories, and meta file data within the NTFS file system.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

The MFT is an index of all files on an NTFS volume.

[True / False]

A

True

Note: the MFT is an index of all files on an NTFS volume, containing information about the file name, its attributes, and the location of its sub-folders.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What CLI command provides information on the Windows file system being used?

A

fsutil fsinfo volumeinfo C:

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What is the theoretical maximum hard drive size NTFS can support?

A

16 EB

Note: one Exabyte (EB) is equal to 1,000 Petabytes or one billion gigabytes (GB).

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

State 5 advantages of using NTFS

A
  1. Very large files
  2. Different file permissions and encryption
  3. Automatically restores consistency by using log file and checkpoint information
  4. File compression when running out of disk space
  5. Establishing disk quotas, limiting space users can use
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

An MFT will have a minimum one record for every file and directory on the NTFS logical volume.

[TRUE / FALSE]

A

TRUE

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

NTFS reserves the first 16 records of the table for __?

A

special information

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

What does the first record of the MFT describe?

A

The first record of this table describes the master file table itself, followed by a MFT mirror record.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

If the first MFT record is corrupted, what does NTFS read?

A

NTFS reads the second record to find the MFT mirror file, whose first record is identical to the first record of the MFT.

24
Q

Where are the data segments for both the MFT and MFT mirror file recorded?

A

The boot section

25
Q

What are “Logs”?

A

Logs are records of events that happen in your computer, either by a person or by a running process.

26
Q

What can Logs help with?

A

Logs can help track what has happened and troubleshoot problems.

27
Q

What interface displays the Windows event logs?

A

the Windows Event Viewer

28
Q

What provides a standard, centralized way for applications (and the operating system) to record important software and hardware events?

A

Event logging

29
Q

What keeps track of all files, directories, and meta file data?

A

the MFT

30
Q

When was Windows Event Logging introduced?

A

Windows event logging was introduced in Windows NT operating system (version 3.1) in 1993.

31
Q

Name the 3 Windows logs that came in the first version of Windows event logging

A
  1. Application event log
  2. System event log
  3. Security event log
32
Q

Modern versions of Windows come with more than a hundred types of Windows event logs.

[True / False]

A

True

33
Q

What does the Application log contain?

A

The Application log contains events logged by applications or programs.

Example - a database program might record a file error in the application log.

34
Q

What are Application logs commonly useful for?

A

Application logs are commonly useful for application support teams.

35
Q

What does the Security log contain?

A

The Security log contains events such as valid and invalid logon attempts, as well as events related to resource use, such as creating, opening, or deleting files or other objects.

36
Q

Can Administrators specify what events are recorded in the Security Log?

A

YES

For example, if an Admin has enabled logon auditing, attempts to log on to the system are recorded in the security log.

37
Q

What are Security logs essential for?

A

Security logs are essential for system and security administrators and forensic examiners.

38
Q

What do the System logs contain?

A

The System log contains events logged by Windows system components.

Example - the failure of a driver or other system component to load during startup is recorded in the system log.

39
Q

Who / what determines the event types logged by System logs?

A

The event types logged by system components are predetermined by Windows.

40
Q

Who depends greatly upon System Logs?

A

System logs are essential for system administrators and technicians.

41
Q

What can be determined using Log files?

A

By using log files, you are able to determine the causes of a certain error or security breaches.

This is because the log files record data concurrently with the activities of the information system.

42
Q

From a security point of view, what is the purpose of Logs?

A

From a security point of view, the purpose of a log is to act as a red flag when something bad is happening.

43
Q

Name the 5 breakdowns of log types.

Hint: Log types can be further broken down into….

A
  1. Errors
  2. Warnings
  3. Information
  4. Success audit
  5. Failure audits
44
Q

What are the 4 main views of Event Viewer?

A
  1. Custom Views
  2. Windows Logs
  3. Application
  4. Services logs Subscriptions
45
Q

What does the “event level” of a Log denote?

A

All logs are assigned an event level. This event level denotes the severity or seriousness of any issues noted in the logs.

46
Q

What are the 5 Event Level categories?

A
  1. Critical
  2. Error
  3. Warning
  4. Information
  5. Verbose
47
Q

What are 2 Event Level types associates only with the Security category?

A
  1. Audit Success
  2. Audit Failure
48
Q

What are the 5 most common Log categories?

A
  1. Application
  2. Security
  3. Setup
  4. System
  5. Forward Events
49
Q

What does the “Forward Events” category of Logs do?

A

Forward Events - Logs from a remote server, forwarded to this server

50
Q

What does the “System” category of Logs do?

A

System - Logs linked to up-time, service status changes, and other messages generated by the operating system

51
Q

What does the “Setup” category of Logs do?

A

Setup - Logs associated with Windows install and updates

52
Q

What CLI command allows an Admin to look through Logs?

A

C:\Windows\System32\winevt\Logs

53
Q

Name the 5 main things to look for in Logs with Log Managers.

A
  1. Password changes
  2. Unauthorized logins
  3. Login failures
  4. New login events
  5. Malware detection
54
Q

What is the Task Scheduler used for?

A

The Task Scheduler is a tool that allows predefined actions to be automatically executed whenever a certain set of conditions is met.

55
Q

When referring to Task Scheduler, what is a “Task”?

A

Task alludes to activity (or activities) taken because of trigger(s).

56
Q

Which log category is associated with Windows install and updates?

A

Setup

57
Q

On Windows 10, what is Task Scheduler typically used for?

A

Typically, the system and certain apps use the scheduler to automate maintenance tasks (such as disk de-fragmentation, disk cleanup, and updates).

Windows (15 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions