| A | B |
| Master File Table (MFT) | Metadata file that points to storage site on physical disk of all other files- includes pointers to entry in security file -$Secure |
| $Secure metadata file | common security descriptors that can be referenced over and over. |
| Transaction logging | changes to files are logged to reverse unfinished transactions when recovering from a crash |
| Quota tracking | keeps track of amount of data each user has stored on a volume and can limit excess |
| Security ID (SID) | given to authenticated users when they log on |
| Access Control List (ACL) | a list of user or group security IDS (SIDs) matched with permission settings. |
| Access Control Entry (ACE) | individual listings of permissions |
| System access control lists (SACLs)- | Controlled by policies or system administrators- control auditing of access to objects |
| access control lists (DACLs) | Lists of users or groups granted access to object-granted by owner |
| Xcopy | copies permissions with folder or file even if copied to another NTFS volume |
| CACLS | DOS command for listing and changing permissions |
| Effective Permissions | All permissions given to user either individually , group membership, or by inheritance |
| Auditing | keep track of security breaches |