Day 2 User Mode Components

Description

page 31
jeriel.juarbe
Flashcards by jeriel.juarbe, updated more than 1 year ago
jeriel.juarbe
Created by jeriel.juarbe almost 12 years ago
19
0

Resource summary

Question Answer
The Windows Subsystem consists of what 3 main components? csrss.exe, win32k.sys, and windows subsystem DLL
What is the Windows Subsystems process? csrss.exe
Which subsystem component is the Kernel mode portion and contains the graphics device interface? Win32k.sys
What are the 4 DLL contained in the Windows Subsytem DLL's? 1. kernel32.dll 2. user32.dll 3. gdi32.dll 4. advapi32.dll
The Native API (ntdll.dll) translates the request from the subsystem into the actual system call that is then dispatched to the system call handler (Executive). True or False? True
System Processes: Session Manager process is loaded by the kernel during what process? the boot process
What is the first user mode process to start? smss.exe
What is the session manager process (smss.exe) responsible for? 1. setups c:\pagefile.sys 2. starts windows subsystem (csrss.exe, DLL's, win32k.sys) 3. starts winlogin.exe 4. sets initial environmental variables
Session Processes: Winlogon (winlogin.exe) does what? handles interactive user logons and logoffs
what are the 2 child processes for winlogon.exe? services.exe and Lsass.exe
What are the Child Processes for Session Manager? csrss.exe and winlogon.exe
What is the Service Control Manager (SCM) responsible for? To manage service processes. It provides a client or server function that is not tied to an interactive user. IE: DNS and DHCP may be running without a use logged on
What is the Local Security Authority (LSA) process? lsass.exe
isass.exe utilized what 2 authentication packages to perform user credential verification's for local and domain logons? Security Access manager (SAM) and the Active Directory
SAM contains what? passwords and other attributes for local users and groups
Domain logon via Active Directory requires communication with? domain controller for authentication
True or False: User Applications like task manager and explorer.exe are determined by the OS subsystem (16, 32, and 64 bit) TRUE
Show full summary Hide full summary

Similar