Question

What is the difference between the Nt and Zw versions of native APIs in kernel mode?

a.

They are identical

b.

The Nt versions are stubs that go through the system-call mechanism

c.

The Zw versions are the actual implementations of the APIs

d.

The Nt versions are the actual implementations of the APIs, while the Zw versions are stubs that go through the system-call mechanism

Posted under Reverse Engineering

Answer: (d).The Nt versions are the actual implementations of the APIs, while the Zw versions are stubs that go through the system-call mechanism Explanation:In kernel mode, the Nt versions are the actual implementations of the APIs, while the Zw versions are stubs that go through the system-call mechanism.

Engage with the Community - Add Your Comment

Confused About the Answer? Ask for Details Here.

Know the Explanation? Add it Here.

Q. What is the difference between the Nt and Zw versions of native APIs in kernel mode?

Add Comment

Similar Questions

Discover Related MCQs

Q. Why would you want to go through the system-call mechanism when calling an API from kernel mode?

View solution

Q. What is the purpose of the safety mechanism employed by the system when calling an API from user mode?

View solution

Q. What is the benefit of calling the Zw APIs in kernel mode?

View solution

Q. What is the system calling mechanism?

View solution

Q. When does a system call take place?

View solution

Q. Why is it not possible to directly call a kernel function from user mode?

View solution

Q. What is the dispatch routine in the system calling mechanism?

View solution

Q. How did the system call mechanism change after Windows 2000?

View solution

Q. What is a system call?

View solution

Q. What is the purpose of the system calling mechanism?

View solution

Q. What does the EAX register contain during a system call?

View solution

Q. What is the IDT?

View solution

Q. What happens when an application calls an operating system API?

View solution

Q. What is the mechanism used by operating systems for switching from user mode to kernel mode?

View solution

Q. Why is it important for reversers to have a basic understanding of executable formats?

View solution

Q. What is the executable format used in Windows?

View solution

Q. Where can you find a full listing of the individual fields of the Portable Executable (PE) format?

View solution

Q. Why is understanding executable formats important for hackers?

View solution

Q. What is the most important thing to bear in mind when dealing with executable files?

View solution

Q. Can an executable file be relocated after it has been loaded?

View solution

View All MCQs on Reverse Engineering

Suggested Topics

Are you eager to expand your knowledge beyond Reverse Engineering? We've curated a selection of related categories that you might find intriguing.

Click on the categories below to discover a wealth of MCQs and enrich your understanding of Computer Science. Happy exploring!

Cryptography and Network Security

Secure your knowledge of information security with our Cryptography and Network...

Java Programming

Level up your coding skills with our Java Programming MCQs. From object-oriented...

CSS

Polish your web design skills with our CSS MCQs. Learn about selectors, properties,...

MS Office

Master the suite of productivity tools with our MS Office MCQs. From Word and Excel...

Computer Graphics

Step into the visual side of computing with our Computer Graphics MCQs. Cover topics...

Cyber Security

Understand the fundamentals of safeguarding digital assets with our Cyber Security...

SQL Server

Master Microsoft's database server with our SQL Server MCQs. Topics cover database...

HTML

Start your journey in web development with our HTML MCQs. Learn the building blocks...

Discrete Mathematics

Refine your mathematical skills essential for computer science with our Discrete...