MOD D05: Windows File Sys Logging Flashcards

1
Q

What does FAT stand for?

A

File Allocation Table

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What is at the end of the File Allocation Table?

A

EOF

(End of File)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What devices are File Allocation Table systems still widely used on?

A

USB Memory Sticks

(slide answer: till widely used on USB memory sticks or memory cards for file storage.)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

How many sectors does a FAT file system have?

  • 16
  • 64
  • 128
  • 4
  • 1
  • 32
  • 8
A

4

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What part of FAT contains the startup code?

A

Boot Sector

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What is the maximum amount of clusters that FAT32 allows?

A

268,435,456

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

How many bits is each FAT12 entry?

A

12

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

How many bits is each FAT32 entry for addressing clusters?

A

28

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What is the maximum volume size of FAT 32?

A

2 TB

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What is the maximum volume size of FAT12?

  • 32 MB
  • 16 MB
  • 16 Mb
  • 64 Mb
  • 8 MB
A

16 MB

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What is the FAT terminated by?

  • 55BB
  • End of file marker / EOF marker
  • B5B5
  • FI
  • done
A

End of file marker / EOF marker

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

When was NTFS Introduced?

  • 1993
  • 1990
  • 2000
  • 1984
  • 2001
  • 2004
  • 8675309
A

1993

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What was the max file size for NTFS when it was released?

  • 48 TB
  • 30 TB
  • 42 TB
  • 32 TB
  • 4 GB
  • 16 TB
  • 4 PB
A

16 TB

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Does FAT32 allow for compression?

A

NO

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Which file system works with Win 98?

  • NAFS
  • NTFS
  • FAT32
  • EXT4
  • EXT3
  • EXT2
A

FAT32

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What does MFT stand for?

A

Master File Table

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

If you want to see what type of file system you are running, what is the windows command line syntax?

A

fsutil fsinfo volumeinfo C:

18
Q

What is the max file size in NTFS?

  • 100 TB
  • 60 GB
  • 32 GB
  • 256 TB
  • 32 TB
  • 16 PB
  • 512 Mb
  • 64 PT
  • 128 TB
  • 512
  • 256
A

256 TB

19
Q

Can an administrator clear the windows logs

[Yes / No]

A

Yes

20
Q

Where can you view event logs? (GUI)

  • System Accountant
  • C:\Windows\System32
  • Windows Event Viewer
  • auditpol
A

Windows Event Viewer

21
Q

Third party applications can integrate into Windows logging.

[True / False]

A

True

22
Q

If a driver fails, which log records this failure?

  • Application
  • System
  • Special
  • Security
A

System

23
Q

A Success audit is a type of log.

[True / False]

A

True

24
Q

A failed login attempt would be recorded in which log?

  • Application
  • System
  • Special
  • Security
A

Security

25
Q

Where are the event logs stored on windows?

  • SYSTEM
  • C:\windows\log
  • C:\windows\system32
  • C:\windows\system32\winevt\logs
  • HKLM:\SAM
  • $C
A

C:\windows\system32\winevt\logs

26
Q

What helps when sifting through logs?

  • powershell
  • systeminfo
  • ascil
  • Log manager
  • notepad
  • sysanalyzer
A

Log manager

27
Q

What is the number that is associated with each log called?

A

Event ID

28
Q

If you wanted your computer to run a disk cleanup once every two weeks, what would allow you to set that up?

A

Task Scheduler

29
Q

What partition in Windows 10 contains the files that start the operating system?

A

Active Primary

30
Q

What file table does NTFS use for managing access to files in Windows 10?

A

MFT

31
Q

What option in NTFS supports reducing the amount of space needed to store a file?

A

Compress / Compression

32
Q

What process places a file system on a disk by creating the root of the directory structure and the file system?

A

Formatting

33
Q

What is the name at the end of a file called that indicates the type of data contained in the program?

A

File extension

34
Q

Which logs can only admin typically see?

  • Application
  • System
  • Special
  • Security
A

Security

35
Q

What is a way that the OS records important actions?

A

logging

36
Q

What are records of events that happen in your computer, either by a person or by a running process? They help you track what happened and troubleshoot problems.

A

logs

37
Q

What windows command allows you to display a list of folder’s files?

  • Dir
  • list
  • ls
  • view
  • pwd
A

Dir

38
Q

How do you clear the screen in windows command line?

  • view no more
  • exit
  • clear
  • avada kedavra
  • cls
A

cls

39
Q

In Powershell, what command allows you to get events and event logs?

A

Get-EventLog

40
Q

What Powershell command allows you to delete a log?

A

Remove-eventlog

41
Q

What is the smallest unit that can be accessed on a storage device like an HDD or SSD?

A

Sector