Look at the list of attributes here and on the PCGuide site.  The test 
question will most likely take the form of 

Name and describe x number of possible attributes found in the MFT, where
x is some number > 0 but less than 1000 ;).


5.(10) NTFS - Discuss how NTFS Master File Table works.  See www.pcguide.com

There is one master file table (MFT) for NTFS partiton. The MFT is a table of 
records with one record for every file on the partition. 

MFT records can be from 1 to 4K in size. But for any particular MFT, all 
records will be the same size.

Each MFT record consists of a set of attributes. The attributes of a 
particular record stores various information about the file that record 
controls.

These attributes may include:

PC-Guide's list

File Name - Name of file with short alias if needed.

Security Descriptor - which includes the Access control list which in turn
includes owner and recognized group ids and granted permissions.

File's data - if small enough to fit, or pointers to blocks on partition if
file too large to fit in an MFT record.

Standard Information - date/time stamp of create,access and change times,  
and attributes carried over from dos such has hidden, archived, readonly, etc.
 
Volume information - information about the current partition.

Index Root Attribute - basically if the record represents a directory, the 
list of filenames in that directory if they fit.

Index Allocation Attribute - if the Index Root Attribute cannot contain all
filenames in directory, this lists pointers to allocated blocks on partition
where overflow data stored. 

Bitmap - list of available blocks (clusters) on partition.

Not all of the records will contain all possible attributes.