Friday, September 30, 2022
HomeE-LearningPrime 45 System Admin Interview Questions

Prime 45 System Admin Interview Questions


Top 45 System Admin Interview Questions and Answers

A system administrator is an individual who’s accountable for the maintenance, configuration, and dependable operation of laptop programs; particularly multi-user computer systems, corresponding to servers. They work on the configuration and upkeep of the day-to-day operations and be certain that the server and shopper computer systems stay safe and carry out nicely. This weblog talks in regards to the high system admin interview questions and solutions which can be divided into two sections, system admin interview questions and solutions for freshers, and system admin interview questions for skilled.

Prime 10 System Admin Interview Questions which can be incessantly requested in interviews:

  1. Are you able to inform us in regards to the expertise you’ve got with {hardware} Parts? 
  2. What in accordance with you can be the private traits of an individual administering a system? 
  3. Are you able to give us one of many examples of the programs you’ve got been working with as an Administrator? 
  4. What have you learnt in regards to the lively listing within the system administration?
  5. Are you able to differentiate between firewall and antivirus? 
  6. In accordance with you, what’s the distinction between FAT and NTFS?
  7. Describe the idea of DHCP.
  8. What’s a site controller?
  9. What’s group coverage?
  10. What have you learnt about proxy servers?

We have now additional labeled system administrator interview Questions into 3 sub-sections, they’re:

  1. System admin interview questions for freshers
  2. System admin interview questions for skilled
  3. System Admin Interview Query FAQs

System admin interview questions for freshers

In case you are a more energizing seeking to enter the sphere of system administration, here’s a checklist of the highest system admin interview questions and solutions for freshers.

1. What have you learnt in regards to the lively listing within the system administration?

After we are speaking about community safety, one factor that issues is the centralized management of every part that may be assured by the lively listing. The data and settings associated to the event are saved within the central database.

For instance, The database may checklist 100 consumer accounts with particulars like every individual’s job title, cellphone quantity, and password. 

2. What’s group coverage?

Community directors can use group coverage to manage the working setting of customers and laptop accounts in an lively listing. It offers a central place for directors to handle and configure working programs, purposes, and consumer settings. If we use it correctly, it lets you enhance the safety of customers’ computer systems and assist defend in opposition to each insider and exterior threats. 

3. Why is it stated that we should always restore a dc that was backed up 9 months in the past?

We will face issues resulting from lingering objects, as a result of, once we are restoring a backup file, the lively listing typically requires that the backup file shouldn’t be greater than 180 days previous. 

4. Are you able to inform us in regards to the expertise you’ve got with {hardware} Parts? 

A system administrator or system admin ought to be capable of do set up and alternative operations with {hardware}. Generally, there could be a have to rebuild the {hardware} element.

5. What do forest, bushes, and area imply?

A website is a logical group of community objects like computer systems, customers, and gadgets which have the identical lively listing database. A tree is a set of domains inside a Microsoft lively listing community by which every area has precisely one father or mother, resulting in a hierarchical tree construction, and a forest is a gaggle of lively listing bushes. 

6. What have you learnt about WINS servers?

WINS stands for Home windows Web Identify Service. This can enable the customers to entry assets by a pc identify fairly than an IP handle. It’s an working system that makes use of a centralized laptop that can present particular features and predetermined guidelines for the customers and the computer systems linked to a Community. For instance, if you would like your laptop to maintain observe of the names and IP addresses of different computer systems in your community.  

7. What in accordance with you can be the private traits of an individual administering a system? 

System directors face a wide range of challenges. They’re the issue solvers and coordinators. They’ve an in-depth understanding of a pc’s software program, {hardware} and networks. Thus, they can instruct workers relating to technical points. Their major activity is to observe the system. They’re able to maintain observe of the server efficiency and inventive designs for laptop programs and are in a position to rapidly organize for alternative in case there’s any {hardware} failure.

8. Are you able to give us one of many examples of the programs you’ve got been working with as an Administrator? 

This usually might embrace Home windows and Linux, which help both asset administration or the GIS. 

9. What’s a lingering object? What’s the command that we use to take away lingering objects? Why is it essential to take away the lingering objects? 

The lingering object is a deleted lively listing that is still on the restored area controller in its native copy of the lively listing. When an object is deleted from the lively listing, a Tombstone (which is short-term) is created, which then needs to be replicated by the area controller earlier than it expires, i.e., they appear to happen when some adjustments are made to the directories after the system backups are created.

After we restore a backup file the AD (ACTIVE DIRECTORY) typically requires that the backup shouldn’t be greater than 180 days previous. This will likely occur if after the backup was accomplished the thing was deleted on one other DC greater than 180 days in the past. In such instances, if we wish to take away the lingering object we use home windows server 2003 and home windows server 2008 as they’ve the power to manually take away the lingering objects utilizing the console utility command REPADMIN.EXE. It’s essential to take away the lingering object because it places an additional burden on the system’s RAM and may create the issues like restricted house availability.    

10. Are you able to differentiate between firewall and antivirus? 

Antivirus: We use antivirus to guard the system from laptop viruses. If you end up utilizing your system, it actively screens for any virus threats from completely different sources. If it finds any virus threats, it tries to scrub or quarantine the virus and in the end retains your system and information protected. 

Firewall: On the flip aspect, a firewall protects your system from outdoors/intruder/hacker assaults. Generally hackers might take management of your system remotely and steal your essential data or the info from the system. It occurs principally within the instances when your system is linked on to the web or a big community. In that case, you need to set up a firewall in your laptop to guard your self from unauthorized entry. It’s both out there within the software program or within the {hardware} type in case you have a single laptop then the software program firewall can do the work however while you wish to defend a big company it’s a must to set up a {hardware} firewall in order to guard their system from such assaults. 

11. In accordance with you why backing up an lively listing is essential and how are you going to backup an lively listing? 

To take care of the right well being of the AD database, the backup of an lively listing is essential. 

Home windows Server 2003: On this, you may backup the lively listing through the use of the NTBACKUP software that’s inbuilt with home windows server 2003 or we will additionally use any 3rd celebration software that can help this characteristic.

Home windows server 2008: There is no such thing as a choice to backup the system state information by way of the conventional backup utility. Right here we have to use the command line with the intention to backup the lively listing. 

  • Step 1 – Open the command immediate by clicking on begin, typing “cmd” after which hitting the enter button. 
  • Step 2 –  Within the command immediate sort “wbadmin begin systemstatebackup – backuptarget;e:” after which press the enter button.
  • Step 3 – Enter “y” and press the enter button with the intention to begin the backup course of.

When the backup is completed, you’re going to get a message that the backup is efficiently accomplished if it has not been accomplished correctly it’s worthwhile to troubleshoot. 

12. What’s a site controller?

Area controller (DC ) is a windows-based laptop system which is used for storing consumer account information in a central database. It permits the system administrator to permit or deny customers entry to system assets, corresponding to printers, paperwork, folders, community areas, and many others. 

13. In accordance with you, what’s the distinction between FAT and NTFS?

FAT:

  • There is no such thing as a safety when the consumer logs in regionally.
  • It often helps file names which have solely 8 characters.
  • It doesn’t help file compression.
  • The partition and file measurement may be as much as 4 GB. 
  • There is no such thing as a such safety permission for file and folder ranges.
  • It doesn’t help unhealthy cluster mapping, so it isn’t very dependable.

NTFS:

  • There may be safety for each the native and the distant customers. 
  • It often helps file names which have 255 characters. 
  • It helps file compression.
  • The partition measurement may be as much as 16 exabytes. 
  • There may be safety for file and folder ranges. 
  • It helps unhealthy cluster mapping and transaction logging, so it’s extremely dependable.

14. Are you able to inform me what’s loopback handle and in what sense is it helpful? 

It’s an handle that sends outgoing indicators again to the identical laptop for testing functions. It’s managed solely throughout the working system so the shopper and the server course of on a single system and may talk with one another. It isn’t bodily linked to a community and it’s helpful within the sense that the loopback offers IT professionals with an interface in order that they will check the IP software program with out worrying about damaged or corrupted drives or the {hardware}.  

15. What have you learnt about proxy servers?

It acts because the gateway between an area community (eg: computer systems in an organization) and a large-scale community (for ex: the web). Through the use of this server, there is a rise in efficiency and safety as it may be used to stop the staff from looking inappropriate and distracting websites. 

16. Are you able to inform us in regards to the home windows registry?

It’s sometimes called “the registry”. Within the Microsoft Home windows working system, it’s the assortment of databases of configuration settings (low-level settings). It shops essential data like the placement of applications, information, and many others. In the event you don’t perceive what you’re doing, you shouldn’t edit the home windows registry or it can trigger issues with the put in purposes or the working system. 

17. What’s the Sysvol Folder? 

We will say that it’s a sort of shared folder which shops group coverage data or we will say that it accommodates public information of the area controllers and the area customers can entry it. Its vital characteristic is that it’s used to ship coverage and login scripts to the area members.

18. Why is VOIP essential?

VOIP is essential because it makes the consumer undertake trendy methods over the normal infrastructure. Through the use of it the customers can use the transmission medium by delivering the voice packets that are designed for phone calls. 

19. What have you learnt about Window deployment companies?

The identify itself means that it’s used to deploy the home windows working system (i.e – there isn’t any want to put in every working system immediately from CD or DVD there are instruments which can be used for managing the server.

  • Home windows deployment companies MMC 
  • Home windows PowerShell cmdlets for WDS 
  • WDSUTIL command-line software 

20. What’s the distinction between a workgroup and a site?

In a workgroup, there’s a explicit system which has the gathering of programs having their very own guidelines and native customers logins. Whereas, within the area, the centralized authentication server which is a set of programs tells what the foundations are. Workgroups are like P2P networks, whereas, domains are like customary shopper/server relationships. 

System Admin Interview Questions for Skilled

In case you are an skilled skilled seeking to attend an upcoming system admin interview and don’t know the place to search for system admin interview questions, here’s a checklist of the highest system admin interview questions for skilled.

21. What are you able to inform us in regards to the light-weight listing entry protocol?

The LDAP (lightweight listing entry protocol) is used to call the thing in an AD (Lively Listing) and makes it extensively accessible for administration and question purposes. It’s mostly used to offer a central place to retailer the usernames and passwords.

22. What have you learnt in regards to the PPP protocol?

PPP protocol stands for point-to-point protocol. This protocol helps us talk between the 2 computer systems (routers). The 2 derivatives of the point-to-point protocol are:

1. Level-to-point protocol over Ethernet
2. Level-to-point protocol over ATM

It’s a multilayer protocol that operates on the identical communication hyperlink.

23. What’s IP Spoofing and what can we do to stop it? 

It’s a sort of mechanism that’s utilized by the attackers to get licensed entry to the system. The intruder is sending the message to the pc with an IP handle that’s coming from a trusted supply/host. We will stop it by performing packet filtering utilizing the particular routers and firewalls we enable packets with acknowledged codecs to enter the community.   

24. What’s rubbish assortment?

The reminiscence that’s occupied and is now not in use known as rubbish assortment. One of many main benefits of rubbish assortment is that it frees the consumer from coping with reminiscence deallocation. The upper stage of programming languages has extra rubbish assortment. The assets aside from reminiscence are not dealt with by rubbish assortment.

25. Inform us one thing about body relay. 

Within the OSI mannequin, it operates on the bodily and information hyperlink layer and is a high-speed information communication know-how. It makes use of frames for the transmission of knowledge within the community. 

26. What’s DNS? 

The DNS stands for the area identify system. The IP addresses are at all times altering so the DNS makes the IP handle into human-friendly names in order that the people can bear in mind it rather more simply. That is much less prone to change. For instance, if you happen to have a look at the usual cellphone e-book and attempt to seek for an individual’s identify, then you’re going to get his/her cellphone quantity. On this case, the DNS performs the identical operation as that of a typical cellphone e-book, however with updates on an hourly or every day foundation. As a result of tiring nature of the DNS, it makes it doable to have repeated queries that may be responded to rapidly.

27. Are you able to inform the distinction between the area admin teams and the Enterprise admin teams within the advert (lively listing )?

Area admin teams: The members of the area admin group have full management of the area.

Enterprise admin group: The members of the enterprise admin group have full management of the domains within the forest. 

28. What’s the authoritative restoration of the lively listing?

To carry out an authoritative restore, we first have to carry out a non-authoritative restore course of. As we all know that the authoritative restore has the power to increment the model variety of the attributes, this can make us restore an object within the listing. On the flip aspect, once we speak in regards to the non-authoritative restore to find out the adjustments for the reason that final backup, it can contact the replication companions after a site controller is again on-line. 

29. In case you are a system administrator what can be your every day routine?

Your reply ought to mirror that you’re nicely conscious of the obligations of the system administrator or what are the duties which can be to be carried out by the system administrator. 

For instance, Duties like software program set up and updates, offering system entry management, creating backups, information restoration, and many others. 

30. What have you learnt in regards to the object server? 

The applying of the shopper/server is written within the type of communication objects. Through the use of ORB (Object Request Dealer), the shopper objects talk with server objects. This server object offers help for concurrency and sharing. 

31. What’s the working of traceroute and what protocol does it use?

Relying on the working system, the Tracert additionally known as a traceroute, means that you can see precisely what all of the routers you contact while you transfer alongside the chain of connections to achieve the ultimate vacation spot. If a case arrives in which you’ll be able to’t ping your last vacation spot, tracert can be utilized as it may inform you precisely the place the chain of connections stopped. It is possible for you to to contact the proper folks, might or not it’s your personal firewall or your ISP or your vacation spot’s ISP or wherever within the center. The traceroute makes use of ICMP protocol however can be being able to make use of step one of the TCP to ship the SYN requests for the response. 

32. What have you learnt about NETBIOS and NetBEUI?

NETBIOS: It’s known as the community fundamental enter or output system. It’s a layer 5 protocol that’s non-routable. It permits the purposes to speak with each other over LAN or we will name it an area space community. NETBIOS usually runs over a TCP/IP which leads to having a community with each an IP handle and a NETBIOS identify equivalent to the hostname.

There are three distinct companies which can be supplied by NETBIOS: 

  • Identify service: The identify registration and backbone is finished  
  • Datagram distribution service: It’s typically used for connectionless communication 
  • Session service: It’s used for connection-oriented communication

NETBUI : NETBEUI is an prolonged model of the NETBIOS. It’s a networking protocol that was developed by IBM and Microsoft in 1985. It’s a major protocol for the Lan supervisor and home windows for workgroups. It helps each connection-based and connectionless communication. It implements stream management and error detection. It is without doubt one of the quickest and best protocols. The improved implementation of a protocol that’s out there on the Microsoft Home windows NT working system known as the NETBEUI body. We must always use it solely on smaller community sizes because it depends extra closely on broadcast packets than on the TCP or an IP i.e., it’s unsuitable for WAN (extensive space networks) and it’s also a non-routable protocol. 

33. Are you able to inform us about RSVP and the way does it work? 

RSVP refers to Useful resource Reservation Protocol. Because the identify suggests, it’s used to order assets throughout a community so once we take a look into the working of the RSVP. Within the RSVP, the request of the host is carried all through the community. It then visits every node within the community. It has two native modules for reservation of assets: the admission management module and the coverage module. The admission module checks whether or not there are adequate out there assets. Whereas, the coverage module checks in regards to the permission of creating a reservation. After these two checks are carried out, the RSVP makes use of packet classifier and the packet scheduler for desired QoS requests. 

34. Describe the idea of DHCP?

DHCP refers to dynamic host configuration protocol. This protocol is used to assign the IP handle to the computer systems. So once we use the DHCP protocol every time a pc is linked to a community, its IP handle is modified. In different phrases, we will say that we’ll have completely different IP addresses. In some instances it may additionally occur that the IP handle is modified when the pc is within the community. We will say {that a} clear-cut benefit of the DHCP protocol is that fairly than utilizing the administrator for managing the IP handle, we use the software program. 

35. Are you able to inform us the primary electronic mail servers and that are their ports?

There are two sorts within the electronic mail servers: the incoming mail server and the outgoing mail server.

  1. The incoming mail server: One of these mail server is often related to the e-mail handle account. To obtain the emails, you need to have the proper settings configuration in your electronic mail shopper program. On this server, there can’t be multiple incoming server.
  2. The outgoing mail server: After we are speaking in regards to the outgoing mail server, the protocol that’s used to ship emails are SMTP that are often known as easy mail switch protocol. The primary electronic mail portal contains: (POP3 – PORT 110 , IMAP – port 143, STMP – port 25 , HTTP – port 80 , safe SMTP – PORT 465 , Safe IMAP – port 585 , IMAP4 over SSL – port 993 , safe POP3 – port 995).

36. Are you able to differentiate between a hub and a swap? 

Each the hub and the swap are roughly the identical. They each have a bigger variety of potential connections and are used for a similar fundamental function to create a community. The one distinction is the best way they deal with the connections in case of hub. They broadcast all the info to each port, and therefore, could make critical safety and reliability issues in addition to there’ll happen numerous collisions on that community. On the flip aspect, once we discuss switches, the connections are created dynamically so the requesting portal solely receives the knowledge that’s designed for it. We will contemplate a hub the place all are speaking on the identical time, however this may be inconvenient as it may transmit or launch data to the folks whom you don’t wish to have entry to that data on the opposite aspect once we discuss switches they’re creating the connections between the ports as in want. 

37. What have you learnt about HTTPS  and what port does it use? 

The HTTPS makes use of the SSL certificates in order to verify that the server you’re connecting is the one which it says. The HTTPS visitors goes over the TCP port 443.

38. What are you able to inform us about TCP?

TCP/IP just isn’t a protocol however is a member of the IP protocol suite. The TCP refers to Transmission Management Protocol and is a massively used  protocol (for ex: HTTP, FTP & SSH). One of many advantages of TCP is that it establishes the connection on each the ends earlier than any information begins to stream. It is usually used to sync up the info stream as if a case arrives when the packets arrive out of order, so the receiving system ought to be capable of work out how the puzzle of packets are imagined to appear like.

39. What have you learnt about UDP?

We will name the UDP the dual of the TCP. The UDP stands for Consumer Datagram Protocol. The UDP doesn’t care if someone is listening on the opposite finish or not and known as the connectionless protocol. Whereas, once we speak in regards to the TCP, it makes everyone keep on the identical web page. The transmission velocity on a UDP is quicker than the transmission velocity of TCP. So if we wish to distinguish between each the TCP & UDP. The TCP at all times wants affirmation from the opposite aspect that the message is acquired or not. On the opposite aspect the UDP is sort of a tv broadcast by which the transmitter doesn’t care or know in regards to the individual on the opposite finish.  

40. What are you able to inform us about port forwarding? 

After we wish to talk with the within of a secured community, there’s using a port forwarding desk throughout the router or different connection administration machine that can enable the precise visitors to be mechanically forwarded on to a selected vacation spot. Most likely it doesn’t enable entry to the server from outdoors immediately into your community. 

41. Are you able to differentiate between a PowerShell and a Command immediate? 

Powershell: it was launched within the 12 months 2006. We will open the facility shell by typing PowerShell. It operates on each the batch instructions and the PowerShell instructions. It permits the consumer to navigate simply between the features by offering the power to create aliases for cmdlets or scripts. The output that comes is within the type of an object and may be handed from one cmdlet to different cmdlets. It might probably additionally execute a sequence of cmdlets which can be put collectively in a script. It’s constructed on a web framework so it has entry to the programming libraries and can be utilized to run all kinds of applications. It helps the Linux based mostly system and may join with the Microsoft cloud merchandise and integrates immediately with WMI. It additionally has an ISE .          

Command Immediate: It was launched within the 12 months 1981. We will open a command immediate from run by typing cmd. It can not function on each the batch instructions and the PowerShell instructions; it solely operates on batch instructions. There is no such thing as a help for the creation of aliases of instructions. The output that’s shaped is within the type of textual content. We can’t switch or move the output from one command to the opposite command. After we wish to run a sure command, the command that’s run first, have to be completed. On this case, there isn’t any such command like the assistance command like within the case of PowerShell to get the knowledge relating to the instructions. There is no such thing as a separate ISE, there’s solely a command line interface it may solely run console sort of applications. It doesn’t help the Linux based mostly system and can’t join with the MS on-line merchandise. There’s a want for an exterior plugin for WMI interplay. It doesn’t have entry to the libraries.

42. Are you able to inform what’s the distinction between an RDP and a KVM?

The RDP stands for Distant desktop protocol because the identify itself suggests in regards to the nature of this protocol it is without doubt one of the major strategies by which we will entry the home windows system remotely for troubleshooting functions and is a software-driven technique whereas once we speak in regards to the KVM it refers to keyboard video and mouses it permits fast- switching between completely different programs however through the use of the identical keyboard monitor and mouse. It’s a hardware-driven technique or system by which a junction field is positioned between the consumer and the programs the KVM doesn’t require any form of lively community connection so it is vitally helpful to make use of the identical form of setup on a number of networks with out doing the cross speak .  

43. What have you learnt about FTP and SSH? What protocol do they use? 

FTP – The FTP is known as the file switch protocol. It’s primarily designed for transferring giant information which additionally has the potential of resuming the obtain within the case the obtain is interrupted. There are two completely different methods following which we will entry the FTP server; they’re the Nameless entry and the usual login. There is just one distinction between the methods which is that the nameless doesn’t require an lively consumer login whereas the usual login requires an lively consumer login. The FTP makes use of ports 20 and 21 of TCP. 

SSH – The SSH stands for safe shell and could be very well-known by linux customers the safe shell is used to create a safe tunnel between gadgets (for instance:- programs, switches, thermostats, and many others ) .it additionally has the power to tunnel the opposite applications by way of it . so in case the applications having the unsecured connections can be utilized within the secured state if we configure it accurately. The SSH makes use of port 22 of TCP  

44. What are ARP and EFS? 

ARP: it refers back to the handle decision protocol that enables the DNS to be linked for MAC addresses; the mapping of the human-friendly URLs to IP addresses is allowed by customary DNS . whereas the handle decision protocol permits the mapping of IP addresses to mac addresses. On this method it makes the system go from an everyday area identify to an precise piece of {hardware}. 

EFS: it refers back to the encrypted file system. The encrypted information which can be tied to the precise consumer turns into tough when attempting to decrypt a file with out the help of the consumer there will also be a case when the consumer forgets his or her password or loses their password in such case it turns into virtually inconceivable to decrypt the file as the method of decryption is tied to the consumer’s login and password. It might probably solely happen on NTFS formatted partitions. For a bigger function the higher various is a Bitlocker. 

45. What’s an Ids?

IDs stands for an intrusion detection system that has two fundamental variations:

  1. Host intrusion detection system (HIDS): It runs as a background utility like an antivirus. 
  2. Community intrusion detection system: After they go throughout the community to begin wanting  for issues that aren’t odd it sniffs packets. 

46. What’s Telnet?

It is without doubt one of the utility protocols that enable the connection on any port and is a really small and versatile utility. It permits the admin to hook up with the distant gadgets. in case telnet transfers information within the type of textual content. on a distant host, telnet offers entry to a command-line interface due to a number of the safety issues once we are utilizing the telnet over an open community supply such because the web it’s considerably within the favour of SSH. It has a negotiable protocol structure due to which many extensions had been adopted. Many of the implementation of telnet has no authentication which may be certain that the communication Is carried out between the 2 desired hosts. it doesn’t encrypt any information that has been despatched over the connection. typically, it’s used to ascertain a connection to TCP (transmission management protocol) port 23, the place the server utility of the telnet is listening. 

System Admin Interview Query FAQs

What’s system administration?

System administration is the method of sustaining and managing a pc system. This contains the {hardware}, software program, and community assets that make up a system. System directors are accountable for guaranteeing that the system is out there and functioning correctly. They might even be accountable for offering coaching and help to customers.

What are the talents of a system administrator?

A system administrator ought to have a variety of abilities with the intention to be efficient of their function. They need to be capable of handle and configure networks, servers, and storage programs. They need to additionally be capable of troubleshoot and resolve points that will come up. Moreover, system directors ought to have sturdy communication and customer support abilities with the intention to work together with customers and different IT employees.

How do I put together for a system administrator interview?

You’ll be able to put together for a system admin interview by studying this weblog on the highest 45 system admin interview questions. Additional, you may head over to Nice Studying Academy and study extra a couple of system administrator profession path.

What’s the function of a system administrator?

The sysadmin’s obligations embrace guaranteeing that system {hardware}, software program, and associated procedures adhere to organizational values and that the provision, efficiency, and safety of the system are constantly maintained. In bigger organizations, system directors usually work in groups accountable for completely different areas of the community, corresponding to storage, safety, or electronic mail.

This brings us to the top of the system admin interview questions that can make it easier to ace your upcoming interview. All the very best! We hope that these interview questions had been useful.

Additionally Learn: Prime 25 Frequent Interview Questions

RELATED ARTICLES

LEAVE A REPLY

Please enter your comment!
Please enter your name here

Most Popular

Recent Comments