Welcome to the Windows Fundamentals MCQs Page

Dive deep into the fascinating world of Windows Fundamentals with our comprehensive set of Multiple-Choice Questions (MCQs). This page is dedicated to exploring the fundamental concepts and intricacies of Windows Fundamentals, a crucial aspect of Reverse Engineering. In this section, you will encounter a diverse range of MCQs that cover various aspects of Windows Fundamentals, from the basic principles to advanced topics. Each question is thoughtfully crafted to challenge your knowledge and deepen your understanding of this critical subcategory within Reverse Engineering.

Check out the MCQs below to embark on an enriching journey through Windows Fundamentals. Test your knowledge, expand your horizons, and solidify your grasp on this vital area of Reverse Engineering.

Note: Each MCQ comes with multiple answer choices. Select the most appropriate option and test your understanding of Windows Fundamentals. You can click on an option to test your knowledge before viewing the solution for a MCQ. Happy learning!

Windows Fundamentals MCQs | Page 21 of 26

Explore more Topics under Reverse Engineering

01

Introduction to Reverse Engineering

02

Low Level Software 🔒

03

Reversing Tools 🔒

04

Beyond the Documentation

05

Deciphering File Formats

06

Auditing Program Binaries 🔒

07

Reversing Malware 🔒

08

Piracy and Copy Protection

09

Antireversing Techniques 🔒

10

Breaking Protections 🔒

11

Reversing .NET 🔒

12

Decompilation

13

Deciphering Code Structures 🔒

14

Understanding Compiled Arithmetic

15

Deciphering Program Data 🔒

Q201.

What is the purpose of the import table in a module?

To list all the functions exported by the module

To list all the functions imported by the module

To list all the variables imported by the module

To list all the variables exported by the module

Discuss

Answer: (b).To list all the functions imported by the module Explanation:The import table in a module lists all the functions imported by the module by their names.

Q202.

How are the addresses of the imported functions found during runtime?

By going over the importing module's export table

By going over the exporting module's import table

By going over the exporting module's export table

By going over the importing module's import table

Discuss

Answer: (c).By going over the exporting module's export table Explanation:The addresses of the imported functions are found by going over the exporting module's export table.

Q203.

What is the purpose of the IAT in a module?

To list all the functions exported by the module

To list all the functions imported by the module

To list all the variables imported by the module

To list all the variables exported by the module

Discuss

Answer: (b).To list all the functions imported by the module Explanation:The IAT in a module is a list of pointers into the executable import address table, which is used to call imported functions.

Q204.

What does the linker do to resolve each entry in the IAT?

It points to the actual function in the exporting module

It points to the actual variable in the exporting module

It points to the actual function in the importing module

It points to the actual variable in the importing module

Discuss

Answer: (a).It points to the actual function in the exporting module Explanation:The linker resolves each entry in the IAT to point to the actual function in the exporting module.

Q205.

What are the Optional Directories in the Portable Executable File Format?

Export Table, Import Table, Resource Table, Debugging Information, Thread Local Storage Table

Export Table, Import Table, Resource Table, Base Relocation Table, Debugging Information

Load Configuration Table, Bound Import Table, Import Address Table, Delay Import Descriptor

All of the above

Discuss

Answer: (b).Export Table, Import Table, Resource Table, Base Relocation Table, Debugging Information Explanation:The Optional Directories in the Portable Executable File Format are Export Table, Import Table, Resource Table, Base Relocation Table, Debugging Information, Thread Local Storage Table, Load Configuration Table, Bound Import Table, Import Address Table, Delay Import Descriptor.

Q206.

What is the Export Table in the Portable Executable File Format?

A list of names and RVAs of all imported functions in the current module

A static definition of various user-interface elements such as strings, dialog box layouts, and menus

A list of addresses within the module that must be recalculated in case the module gets loaded in any address other than the one it was built for

A list of names and RVAs of all exported functions in the current module

Discuss

Answer: (d).A list of names and RVAs of all exported functions in the current module Explanation:The Export Table in the Portable Executable File Format is a list of names and RVAs of all exported functions in the current module.

Q207.

What is the Import Table in the Portable Executable File Format?

A list of names and RVAs of all exported functions in the current module

A static definition of various user-interface elements such as strings, dialog box layouts, and menus

A list of addresses within the module that must be recalculated in case the module gets loaded in any address other than the one it was built for

A list of names of module and functions that are imported from the current module

Discuss

Answer: (d).A list of names of module and functions that are imported from the current module Explanation:The Import Table in the Portable Executable File Format is a list of names of module and functions that are imported from the current module.

Q208.

What is the Resource Table in the Portable Executable File Format?

A list of names and RVAs of all exported functions in the current module

A static definition of various user-interface elements such as strings, dialog box layouts, and menus

A list of addresses within the module that must be recalculated in case the module gets loaded in any address other than the one it was built for

A list of addresses that points to the executable’s resource directory

Discuss

Answer: (b).A static definition of various user-interface elements such as strings, dialog box layouts, and menus Explanation:The Resource Table in the Portable Executable File Format points to the executable’s resource directory. A resource directory is a static definition of various user-interface elements such as strings, dialog box layouts, and menus.

Q209.

What is the Import Address Table (IAT) in the Portable Executable File Format?

A list of names and RVAs of all exported functions in the current module

A static definition of various user-interface elements such as strings, dialog box layouts, and menus

A list of addresses within the module that must be recalculated in case the module gets loaded in any address other than the one it was built for

A list of entries for each function imported from the current module

Discuss

Answer: (d).A list of entries for each function imported from the current module Explanation:The Import Address Table (IAT) in the Portable Executable File Format contains a list of entries for each function imported from the current module. These entries are initialized in load time to the actual addresses of the imported functions.

Q210.

What is the relevance of I/O in reversing?

It makes tracing a program’s communications with the outside world easier

It enables code-level reversing

It is irrelevant to reversing

None of the above

Discuss

Answer: (a).It makes tracing a program’s communications with the outside world easier Explanation:I/O can be relevant to reversing because tracing a program’s communications with the outside world is much easier than doing code-level reversing.

Page 21 of 26

Low Level Software 🔒

Reversing Tools 🔒

Auditing Program Binaries 🔒

Reversing Malware 🔒

Antireversing Techniques 🔒

Breaking Protections 🔒

Reversing .NET 🔒

Deciphering Code Structures 🔒

Deciphering Program Data 🔒

Welcome to the Windows Fundamentals MCQs Page

Windows Fundamentals MCQs | Page 21 of 26

Explore more Topics under Reverse Engineering

Introduction to Reverse Engineering

Beyond the Documentation

Deciphering File Formats

Piracy and Copy Protection

Decompilation

Understanding Compiled Arithmetic

Suggested Topics

MATLAB

Internet of Things (IoT)

Digital Image Processing (DIP)

CSS

Computer Hardware

Management Information Systems

Hadoop

CompTIA PenTest+ Certification Exam PT0 002

Cryptography and Network Security