nerdexam
GIAC

GCFA · Question #304

Which of the following Linux file systems is a journaled file system?

The correct answer is A. ext3. ext3 introduced journaling to the Linux ext filesystem family, recording metadata changes before committing them so the filesystem can recover quickly after a crash.

Advanced Mac & Linux Forensics

Question

Which of the following Linux file systems is a journaled file system?

Options

  • Aext3
  • Bext4
  • Cext2
  • Dext

How the community answered

(43 responses)
  • A
    74% (32)
  • B
    14% (6)
  • C
    2% (1)
  • D
    9% (4)

Why each option

ext3 introduced journaling to the Linux ext filesystem family, recording metadata changes before committing them so the filesystem can recover quickly after a crash.

Aext3Correct

ext3 added a dedicated journal to the ext2 filesystem structure that logs metadata operations before they are applied to the main filesystem. This write-ahead logging allows the kernel to replay or discard incomplete transactions after an unclean shutdown, enabling fast and consistent recovery without a full disk scan.

Bext4

ext4 is also a journaled filesystem and inherits ext3's journaling capability while adding features like extents and larger volume support, but the question targets ext3 as the original journaled member of the ext family.

Cext2

ext2 is a non-journaled filesystem; after a crash it requires a full fsck consistency check rather than a journal replay, making recovery significantly slower and more error-prone.

Dext

The original ext filesystem is an early, deprecated Linux filesystem that predates journaling support and lacks the reliability features of its successors.

Concept tested: ext3 journaling filesystem vs. non-journaled ext2

Source: https://www.kernel.org/doc/html/latest/filesystems/ext3.html

Topics

#ext3#journaled file system#Linux file systems#ext2 vs ext3

Community Discussion

No community discussion yet for this question.

Full GCFA Practice