|
|
Created by jeriel.juarbe
almost 12 years ago
|
|
| Question | Answer |
| The Windows Subsystem consists of what 3 main components? | csrss.exe, win32k.sys, and windows subsystem DLL |
| What is the Windows Subsystems process? | csrss.exe |
| Which subsystem component is the Kernel mode portion and contains the graphics device interface? | Win32k.sys |
| What are the 4 DLL contained in the Windows Subsytem DLL's? | 1. kernel32.dll 2. user32.dll 3. gdi32.dll 4. advapi32.dll |
| The Native API (ntdll.dll) translates the request from the subsystem into the actual system call that is then dispatched to the system call handler (Executive). True or False? | True |
| System Processes: Session Manager process is loaded by the kernel during what process? | the boot process |
| What is the first user mode process to start? | smss.exe |
| What is the session manager process (smss.exe) responsible for? | 1. setups c:\pagefile.sys 2. starts windows subsystem (csrss.exe, DLL's, win32k.sys) 3. starts winlogin.exe 4. sets initial environmental variables |
| Session Processes: Winlogon (winlogin.exe) does what? | handles interactive user logons and logoffs |
| what are the 2 child processes for winlogon.exe? | services.exe and Lsass.exe |
| What are the Child Processes for Session Manager? | csrss.exe and winlogon.exe |
| What is the Service Control Manager (SCM) responsible for? | To manage service processes. It provides a client or server function that is not tied to an interactive user. IE: DNS and DHCP may be running without a use logged on |
| What is the Local Security Authority (LSA) process? | lsass.exe |
| isass.exe utilized what 2 authentication packages to perform user credential verification's for local and domain logons? | Security Access manager (SAM) and the Active Directory |
| SAM contains what? | passwords and other attributes for local users and groups |
| Domain logon via Active Directory requires communication with? | domain controller for authentication |
| True or False: User Applications like task manager and explorer.exe are determined by the OS subsystem (16, 32, and 64 bit) | TRUE |
Want to create your own Flashcards for free with GoConqr? Learn more.