Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

0-CWO > 1-Windows Block Test > Flashcards

1-Windows Block Test Flashcards

1
Q

Kernel

A

Heart of the OS
Fast and simple operations
Handles low level tasks such as hardware and thread management

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Processor

A

Brain of computer
Runs in two modes: User and Kernel

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

User Mode (Processor)

A

Unprivileged/Restricted
Own private virtual address space
Isolates app to prevent alteration of outside data

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Kernel Mode (Processor)

A

Privileged/Unrestricted
Shares address space
Can overwrite other programs and compromise system

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Drivers

A

Software that enables communication between OS and hardware
Can communicate directly with hardware, or with lower level drivers
Come in two types: User mode and kernel mode
Three levels: High, intermediate, and low
Three categories: Software, Bus, and Device

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

User Mode (Driver)

A

Interface between apps and kernel-mode drivers or other OS components

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Kernel Mode (Driver)

A

Interface with hardware, I/O, thread management, etc.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

High Level (Driver)

A

Always depend on low level drivers
Ex: File system drivers

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Intermediate Level (Driver)

A

Always depend on low level drivers
Divided into 3 categories: Function, Filter, and Software Bus

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Low Level (Drivers)

A

Controls bus in which hardware is connected
Does NOT depend on low level drivers
Ex: PCI bus drivers

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Function Drivers

A

Intermediate Level
Handles reads/writes to a device
Typically created by device manufacturer and are required
Provides operational interface for device

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Filter Drivers

A

Intermediate Level
Optional drivers
Provide additional functionality
Communicates with other filter or function drivers

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Software Bus Drivers

A

Intermediate Level
Provides interface for high level drivers to attach to a set of child devices

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Software Driver

A

Always runs in kernel mode
Not associated with hardware device
Created to gain access to data accessible only to the kernel

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Bus Driver

A

Always runs in kernel mode
Ex: PCI bus, USB bus
Provides communication to several devices sharing a bus

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Device Driver

A

Can run in kernel or user mode
Drivers necessary for the OS to communicate with an attached device

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Boot Phases

A

BIOS Phase (Preboot)
Boot Loader Phase
Kernel Phase

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

BIOS Phase (Boot process)

A

UEFI performs POST
MBR read in (IDs where system partition is)
runs bootmgr file

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

Boot Loader Phase (Boot process)

A

Windows Boot Manager launched (Reads in BCD to HKLM\BCD00000000
Windows Boot Loader launched (Starts Winload.exe)
Boot Manager and Loader load Kernel into memory

20
Q

Kernel Phase (Boot process)

A

Loads registry and drivers marked as "BOOT_START"
Launches Session Manager (smss.exe)
User session processes launched
Launch Services
Winlogon.exe (logon screen)
User session created

21
Q

FAT and NTFS

A

Two Windows file systems

22
Q

FAT

A

File Allocation Table
MS-DOS to Windows ME
Does not support file compression or encryption

23
Q

FAT16

A

Drives up to 16GB; max file size 2GB

24
Q

FAT32

A

Drives up to 16TB; max file size 4GB

25
Q

exFAT

A

Drives up to 512TiB - 64ZiB; max file size approx 128 PiB

26
Q

NTFS

A

New Technology File System
Win NT to Win 10
Drive size up to just under 16EB, max volume size 256TB
Supports EFS (Encrypting File System)
Supports User/Group permissions
Uses change log tracking system changes
Supports VSS (Volume Shadow Copy Service) - Backs up files currently on the system
Dynamically remaps corrupt sectors so the system doesn't use them

27
Q

NTFS Permission Types

A

NTFS Permissions and Share Permissions

28
Q

NTFS Permissions

A

Basic Permissions: Read, Read and Execute, Write, Modify, List Contents, Full Control

Advanced Permissions available for more granular control

Can be inherited

29
Q

Share Permissions

A

Less granular control
Full Control, Change, Read
Only applies to files on network share

30
Q

File Permission Priorities

A

Local Files use only NTFS permissions
Remote files use NTFS AND Share permissions (Most restrictive applied first)
User permissions are cumulative with group permissions

31
Q

Inherited vs Explicit Permissions

A

Inherited: Inherited from parent folder
Explicit: Assigned directly to file/folder. Take precedence over inherited permissions

Explicit Deny > Explicit Allow > Inherited Deny > Inherited Allow

32
Q

Copy within NTFS partition

A

Creates NEW FILE, inherits permissions of target folder

33
Q

Moving across NTFS partition

A

Creates NEW FILE and deletes old one, inherits target folder permissions

34
Q

Moving within NTFS Partition

A

Does NOT create new file, updatets location in directory and keeps original permissions

35
Q

Moving/copying from NTFS partition to FAT partition

A

Lose attributes and security permissions
Retain long file names

36
Q

Registry

A

Central hierarchical database that stores config info for system to run
Windows continually references during operation

37
Q

Registry Root Keys

A

Root Keys:
HKEY_LOCAL_MACHINE: Config info for OS
HKEY_USERS: User profile Info

Linked Keys:

HKEY_CLASSES_ROOT: HKLM\SOFTWARE\Classes

HKEY_CURRENT_USER: HKU\SID

HKEY_CURRENT_CONFIG: HKLM\SYSTEM\CurrentControlSet\HardwareProfiles\Current

38
Q

Registry Structure

A

Keys - Comparable to Folders
Values - Comparable to Files
Value Types:
Binary: REG_BINARY - Binary data
String: REG_SZ - null-terminated string
Multi String: REG_MULTI_SZ - Sequence of null-terminated Strings
Expandable String: REG_EXPAND_SZ - Environment Variables
Double Word: REG_DWORD - 32 bit number
Quadruple Word: REG_QWORD - 64 bit number
Data - Content determined by the value's type

39
Q

SID

A

Unique value ID'ing Users or groups
"Well known SIDs" exist for static values such as administrators group
Made up of Domain Identifier (IDs Domain or Computer) and Relative ID (RID, Unique value identifying user, group, or account)

40
Q

GUID

A

128 bit number used to ID software or hardware versions

41
Q

HKLM\Software\Microsoft\Windows\CurrentVersion\Run

A

System location - any user logging in will run

42
Q

HKU\Software\Microsoft\Windows\CurrentVersion\Run

A

Only specific user will run

43
Q

Remote Desktop Config

A

HKLM\SYSTEM\CurrentControlSet\Control\Terminal Server
Set fDenyTSConnections to 0 to enable RDP, 1 to disable

44
Q

Modify Services through Registry

A

HKLM\SYSTEM\CurrentControlSet\Services

Binary must know how to communicate with services controller

45
Q

Delete or move files on reboot

A

HKLM\SYSTEM\CurrentControlSet\Control\Session Manager
Value: PendingFileRenameOperations
Data: Absolute File Path for the moving/deleting of certain files

46
Q

Windows Defender Exclusions (Registry)

A

HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths
Value: Absolute Filepath to a folder
Data: REG_DWORD 0x0

Excludes filepath from Windows Defender actions

0-CWO (10 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions