Brainscape's Knowledge GenomeTM


Top Flashcards (Certified)
All Flashcards

0-CWO > 1-Windows Block Test > Flashcards

1-Windows Block Test Flashcards

1
Q

Kernel

A

Heart of the OS
Fast and simple operations
Handles low level tasks such as hardware and thread management

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Processor

A

Brain of computer
Runs in two modes: User and Kernel

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

User Mode (Processor)

A

Unprivileged/Restricted
Own private virtual address space
Isolates app to prevent alteration of outside data

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Kernel Mode (Processor)

A

Privileged/Unrestricted
Shares address space
Can overwrite other programs and compromise system

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Drivers

A

Software that enables communication between OS and hardware
Can communicate directly with hardware, or with lower level drivers
Come in two types: User mode and kernel mode
Three levels: High, intermediate, and low
Three categories: Software, Bus, and Device

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

User Mode (Driver)

A

Interface between apps and kernel-mode drivers or other OS components

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Kernel Mode (Driver)

A

Interface with hardware, I/O, thread management, etc.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

High Level (Driver)

A

Always depend on low level drivers
Ex: File system drivers

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Intermediate Level (Driver)

A

Always depend on low level drivers
Divided into 3 categories: Function, Filter, and Software Bus

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Low Level (Drivers)

A

Controls bus in which hardware is connected
Does NOT depend on low level drivers
Ex: PCI bus drivers

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Function Drivers

A

Intermediate Level
Handles reads/writes to a device
Typically created by device manufacturer and are required
Provides operational interface for device

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Filter Drivers

A

Intermediate Level
Optional drivers
Provide additional functionality
Communicates with other filter or function drivers

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Software Bus Drivers

A

Intermediate Level
Provides interface for high level drivers to attach to a set of child devices

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Software Driver

A

Always runs in kernel mode
Not associated with hardware device
Created to gain access to data accessible only to the kernel

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Bus Driver

A

Always runs in kernel mode
Ex: PCI bus, USB bus
Provides communication to several devices sharing a bus

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Device Driver

A

Can run in kernel or user mode
Drivers necessary for the OS to communicate with an attached device

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Boot Phases

A

BIOS Phase (Preboot)
Boot Loader Phase
Kernel Phase

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

BIOS Phase (Boot process)

A

UEFI performs POST
MBR read in (IDs where system partition is)
runs bootmgr file

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

Boot Loader Phase (Boot process)

A

Windows Boot Manager launched (Reads in BCD to HKLM\BCD00000000
Windows Boot Loader launched (Starts Winload.exe)
Boot Manager and Loader load Kernel into memory

20
Q

Kernel Phase (Boot process)

A

Loads registry and drivers marked as "BOOT_START"
Launches Session Manager (smss.exe)
User session processes launched
Launch Services
Winlogon.exe (logon screen)
User session created

21
Q

FAT and NTFS

A

Two Windows file systems

22
Q

FAT

A

File Allocation Table
MS-DOS to Windows ME
Does not support file compression or encryption

23
Q

FAT16

A

Drives up to 16GB; max file size 2GB

24
Q

FAT32

A

Drives up to 16TB; max file size 4GB

25
exFAT
Drives up to 512TiB - 64ZiB; max file size approx 128 PiB
26
NTFS
New Technology File System Win NT to Win 10 Drive size up to just under 16EB, max volume size 256TB Supports EFS (Encrypting File System) Supports User/Group permissions Uses change log tracking system changes Supports VSS (Volume Shadow Copy Service) - Backs up files currently on the system Dynamically remaps corrupt sectors so the system doesn't use them
27
NTFS Permission Types
NTFS Permissions and Share Permissions
28
NTFS Permissions
Basic Permissions: Read, Read and Execute, Write, Modify, List Contents, Full Control Advanced Permissions available for more granular control Can be inherited
29
Share Permissions
Less granular control Full Control, Change, Read Only applies to files on network share
30
File Permission Priorities
Local Files use only NTFS permissions Remote files use NTFS AND Share permissions (Most restrictive applied first) User permissions are cumulative with group permissions
31
Inherited vs Explicit Permissions
Inherited: Inherited from parent folder Explicit: Assigned directly to file/folder. Take precedence over inherited permissions Explicit Deny > Explicit Allow > Inherited Deny > Inherited Allow
32
Copy within NTFS partition
Creates NEW FILE, inherits permissions of target folder
33
Moving across NTFS partition
Creates NEW FILE and deletes old one, inherits target folder permissions
34
Moving within NTFS Partition
Does NOT create new file, updatets location in directory and keeps original permissions
35
Moving/copying from NTFS partition to FAT partition
Lose attributes and security permissions Retain long file names
36
Registry
Central hierarchical database that stores config info for system to run Windows continually references during operation
37
Registry Root Keys
Root Keys: HKEY_LOCAL_MACHINE: Config info for OS HKEY_USERS: User profile Info Linked Keys: HKEY_CLASSES_ROOT: HKLM\SOFTWARE\Classes HKEY_CURRENT_USER: HKU\SID HKEY_CURRENT_CONFIG: HKLM\SYSTEM\CurrentControlSet\HardwareProfiles\Current
38
Registry Structure
Keys - Comparable to Folders Values - Comparable to Files Value Types: Binary: REG_BINARY - Binary data String: REG_SZ - null-terminated string Multi String: REG_MULTI_SZ - Sequence of null-terminated Strings Expandable String: REG_EXPAND_SZ - Environment Variables Double Word: REG_DWORD - 32 bit number Quadruple Word: REG_QWORD - 64 bit number Data - Content determined by the value's type
39
SID
Unique value ID'ing Users or groups "Well known SIDs" exist for static values such as administrators group Made up of Domain Identifier (IDs Domain or Computer) and Relative ID (RID, Unique value identifying user, group, or account)
40
GUID
128 bit number used to ID software or hardware versions
41
HKLM\Software\Microsoft\Windows\CurrentVersion\Run
System location - any user logging in will run
42
HKU\Software\Microsoft\Windows\CurrentVersion\Run
Only specific user will run
43
Remote Desktop Config
HKLM\SYSTEM\CurrentControlSet\Control\Terminal Server Set fDenyTSConnections to 0 to enable RDP, 1 to disable
44
Modify Services through Registry
HKLM\SYSTEM\CurrentControlSet\Services Binary must know how to communicate with services controller
45
Delete or move files on reboot
HKLM\SYSTEM\CurrentControlSet\Control\Session Manager Value: PendingFileRenameOperations Data: Absolute File Path for the moving/deleting of certain files
46
Windows Defender Exclusions (Registry)
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths Value: Absolute Filepath to a folder Data: REG_DWORD 0x0 Excludes filepath from Windows Defender actions

0-CWO (10 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2025 Bold Learning Solutions. Terms and Conditions