Welcome to the Windows Fundamentals MCQs Page

Dive deep into the fascinating world of Windows Fundamentals with our comprehensive set of Multiple-Choice Questions (MCQs). This page is dedicated to exploring the fundamental concepts and intricacies of Windows Fundamentals, a crucial aspect of Reverse Engineering. In this section, you will encounter a diverse range of MCQs that cover various aspects of Windows Fundamentals, from the basic principles to advanced topics. Each question is thoughtfully crafted to challenge your knowledge and deepen your understanding of this critical subcategory within Reverse Engineering.

Check out the MCQs below to embark on an enriching journey through Windows Fundamentals. Test your knowledge, expand your horizons, and solidify your grasp on this vital area of Reverse Engineering.

Note: Each MCQ comes with multiple answer choices. Select the most appropriate option and test your understanding of Windows Fundamentals. You can click on an option to test your knowledge before viewing the solution for a MCQ. Happy learning!

Windows Fundamentals MCQs | Page 10 of 26

Explore more Topics under Reverse Engineering

01

Introduction to Reverse Engineering

02

Low Level Software 🔒

03

Reversing Tools 🔒

04

Beyond the Documentation

05

Deciphering File Formats

06

Auditing Program Binaries 🔒

07

Reversing Malware 🔒

08

Piracy and Copy Protection

09

Antireversing Techniques 🔒

10

Breaking Protections 🔒

11

Reversing .NET 🔒

12

Decompilation

13

Deciphering Code Structures 🔒

14

Understanding Compiled Arithmetic

15

Deciphering Program Data 🔒

Q91.

What is the object’s access mask in Windows?

A 64-bit integer that is divided into two 32-bit access flag words

A 32-bit integer that is divided into two 16-bit access flag words

A 16-bit integer that is divided into two 8-bit access flag words

None of the above

Discuss

Answer: (b).A 32-bit integer that is divided into two 16-bit access flag words Explanation:The object’s access mask is a 32-bit integer that is divided into two 16-bit access flag words. The upper word contains generic access flags such as GENERIC_READ and GENERIC_WRITE. The lower word contains object-specific flags such as PROCESS_TERMINATE, which allows you to terminate a process using its handle, or KEY_ENUMERATE_SUB_KEYS, which allows you to enumerate the subkeys of an open registry key.

Q92.

What is the purpose of naming kernel objects in Windows?

To manage them using a centralized object manager component

To provide a way to uniquely identify them throughout the system

To allow user-mode applications to directly access hierarchical directories

None of the above

Discuss

Answer: (b).To provide a way to uniquely identify them throughout the system Explanation:Named objects provide a way to uniquely identify kernel objects throughout the system.

Q93.

What is the benefit of using a common name for a kernel object in Windows?

It guarantees that all processes are dealing with the same object

It creates a new object for each process

It allows each process to have its own private handle table

None of the above

Discuss

Answer: (a).It guarantees that all processes are dealing with the same object Explanation:Using a common name effectively guarantees that all processes are dealing with the same kernel object.

Q94.

What is the purpose of the BaseNamedObjects directory in Windows?

To store all conventional Win32 named objects

To store the device objects for all currently active system devices

To store symbolic links to kernel objects

None of the above

Discuss

Answer: (a).To store all conventional Win32 named objects Explanation:The BaseNamedObjects directory is where all conventional Win32 named objects, such as mutexes, are stored.

Q95.

What are the basic structural units in Windows?

Processes and threads

Contexts and stacks

Programs and memory blocks

Data structures and code modules

Discuss

Answer: (a).Processes and threads Explanation:Processes and threads are the basic structural units in Windows.

Q96.

What is a process in Windows?

A piece of code that can be executed by the system

A thread that has its own context and stack

An isolated memory address space used for running a program

A component responsible for managing threads

Discuss

Answer: (c).An isolated memory address space used for running a program Explanation:A process is an isolated memory address space used for running a program.

Q97.

What is the minimum number of threads required for a process to run a program?

None

One

Two

It depends on the program

Discuss

Answer: (b).One Explanation:In order to actually run a program, a process must have at least one thread running.

Q98.

What is a thread in Windows?

A piece of code that can be executed by the system

A process that has its own context and stack

An isolated memory address space used for running a program

A primitive code execution unit

Discuss

Answer: (d).A primitive code execution unit Explanation:A thread is a primitive code execution unit.

Q99.

How does Windows achieve concurrency?

By running multiple processes at the same time

By running multiple threads at the same time

By running multiple programs at the same time

By running multiple memory address spaces at the same time

Discuss

Answer: (b).By running multiple threads at the same time Explanation:Windows achieves concurrency by interrupting a running thread at any given moment and switching to another thread.

Q100.

What is the internal data structure of a thread?

A memory address space

A code module

A context data structure combined with one or two memory blocks

A scheduler and a dispatcher

Discuss

Answer: (c).A context data structure combined with one or two memory blocks Explanation:A thread is nothing but a data structure that has a CONTEXT data structure telling the system the state of the processor when the thread last ran, combined with one or two memory blocks that are used for stack space.

Page 10 of 26

Low Level Software 🔒

Reversing Tools 🔒

Auditing Program Binaries 🔒

Reversing Malware 🔒

Antireversing Techniques 🔒

Breaking Protections 🔒

Reversing .NET 🔒

Deciphering Code Structures 🔒

Deciphering Program Data 🔒

Welcome to the Windows Fundamentals MCQs Page

Windows Fundamentals MCQs | Page 10 of 26

Explore more Topics under Reverse Engineering

Introduction to Reverse Engineering

Beyond the Documentation

Deciphering File Formats

Piracy and Copy Protection

Decompilation

Understanding Compiled Arithmetic

Suggested Topics

Microprocessor

Formal Languages and Automata Theory

CompTIA PenTest+ Certification Exam PT0 002

Hadoop

Object Oriented Programming Using C++

Digital Logic Design

Web Technologies

Discrete Mathematics

Management Information Systems