Unit 3 - quiz Flashcards
Which Windows registry hive stores information about object linking and embedding (OLE) registrations?
HKEY_CLASSES_ROOT - HKCR
Which Windows registry hive stores information about the current hardware profile?
HKEY_CURRENT_CONFIG - HKCC
Which Windows registry hive stores information concerning all the user accounts on the host?
HKEY_USERS - HKU
Which Windows registry hive stores information concerning the currently logged in user?
HKEY_CURRENT_USERS - HKCU
Which Windows registry hive stores system-related information?
HKEY_LOCAL_MACHINE - HKLM
Which Windows tool selectively denies traffic to a computer or network segment?
Windows Defender Firewall
Which Windows tool logs history, application, security, and system events?
Event Viewer
Which windows tool or command can be used to look for inbound or outbound TCP connections on a Windows host that are not authorized?
netstat
Which Windows tool provides resource information, such as memory, CPU, disk, and network?
Resource Monitor
Which Windows tool is the built-in virus and spyware protection?
Windows Defender
Which command or tool finds the IP address of a server from a URL?
Nslookup
Which Windows tool provides information about applications, processes, and services running on the computer?
Task Manager
Which Windows tool is the database that stores all the information about hardware, applications, users, and system settings?
Windows Registry
What is a thread?
A thread is a unit of execution in a process.
What is a windows registry?
The Windows Registry is a hierarchical database that stores most of the operating systems and desktop
environment configuration settings
How do you access the windows registry?
To access the Windows Registry, click Start > Search for regedit and select Registry Editor. Click Yes
when asked to allow this app to make changes.
How are PowerShell Commands, cmdlets constructed?
PowerShell commands, cmdlets, are constructed in the form of verb-noun string. To identify the
PowerShell command to list the subdirectories and files in a directory, enter Get-Alias dir at the
PowerShell prompt.
PS C:\Users\CyberOpsUser> Get-Alias dir
What PowerShell would you enter to see the options available for the netstat command?
enter netstat -h to see the options available for the netstat command
What PowerShell would you enter to see per-protocol statistics?
Displays per-protocol statistics. By default, statistics are
shown for IP, IPv6, ICMP, ICMPv6, TCP, TCPv6, UDP, and UDPv6;
the -p option may be used to specify a subset of the default.
What command would you use to display the routing table with the active routes?
To display the routing table with the active routes, enter netstat -r at the prompt.
What is the netstat command can also display the processes associated with the active TCP connections.
The netstat command can also display the processes associated with the active TCP connections. Enter
the netstat -abno at the prompt.
