nerdexam
GIAC

GCFA · Question #109

You are responsible for maintaining and troubleshooting PC's at your company. The receptionist reports her screen has gone blue. When you get there you notice the 'blue screen of death' with an…

The correct answer is A. The hard disk is corrupt. The NTFS_FILE_SYSTEM BSOD (Stop 0x00000024) indicates the NTFS file system driver encountered an unrecoverable condition, most commonly caused by hard disk corruption or failure.

File System & Registry Forensics

Question

You are responsible for maintaining and troubleshooting PC's at your company. The receptionist reports her screen has gone blue. When you get there you notice the 'blue screen of death' with an error message NTFS_FILE_SYSTEM. What is the most likely cause of this error?

Options

  • AThe hard disk is corrupt
  • BA virus
  • CWindows was installed improperly.
  • DGet the latest patch for Windows.

How the community answered

(29 responses)
  • A
    76% (22)
  • B
    7% (2)
  • C
    3% (1)
  • D
    14% (4)

Why each option

The NTFS_FILE_SYSTEM BSOD (Stop 0x00000024) indicates the NTFS file system driver encountered an unrecoverable condition, most commonly caused by hard disk corruption or failure.

AThe hard disk is corruptCorrect

The NTFS_FILE_SYSTEM stop error (Bug Check 0x24) is triggered by the ntfs.sys driver when it cannot read or write file system structures correctly, which is most commonly the result of physical disk corruption or a failing hard drive. Running CHKDSK or replacing the hard disk is the standard remediation. The error directly maps to an NTFS-level fault rather than a software, configuration, or virus pattern.

BA virus

While viruses can corrupt files, the NTFS_FILE_SYSTEM stop code specifically points to a file system or disk-level driver fault, not a general viral infection pattern that would produce a different class of error.

CWindows was installed improperly.

An improper Windows installation typically causes setup failures or missing-file errors at initial boot, not an NTFS_FILE_SYSTEM stop code in an already-running operating system.

DGet the latest patch for Windows.

Applying a Windows patch addresses software vulnerabilities or driver bugs but cannot resolve underlying disk hardware corruption that is the primary trigger for this specific stop error.

Concept tested: NTFS_FILE_SYSTEM BSOD stop error diagnosis

Source: https://learn.microsoft.com/en-us/windows-hardware/drivers/debugger/bug-check-0x24--ntfs-file-system

Topics

#NTFS#BSOD#disk corruption#Windows filesystem errors

Community Discussion

No community discussion yet for this question.

Full GCFA Practice