How does NTFS handle data structures? How does NTFS recover from a system crash? What is guaranteed after a recovery takes place?
Answer:
-In NTFS, all file-system data structure updates are performed inside transactions. Before a data structure is altered, the transaction writes a log record containing redo and undo information. A commit record is written to the log after a transaction has succeeded. After a crash the file system can be restored to a consistent state by processing the log records,
first redoing operations for committed transactions and undoing operations for transactions that did not successfully commit. This scheme does not guarantee that user file contents are correct after recovery, but rather that the file-system data structures (file metadata) are undamaged and reflect some consistent state that existed before the crash