How confident are you for the exam?

No problem. Aced., I'm going to fail for sure., I might pass., I should be okay.

What does Hypervisor-Enforced Code Integrity do?

Checks signatures of system files and drivers

What is stored in $numbers if you type the following in PowerShell? $numbers = 1..5

An array of integers: 1, 2, 3, 4, 5

Which of the following are one of the primary Transport Layer protocols?

User Datagram Protocol, Transmission Control Protocol

What happens if a DNS server cannot resolve a host name?

It queries other DNS servers for the answer

What is the purpose of a shell?

Allow users to issue commands to the computer

studbud

Windows - Final

110 termsStudBud Administration142 plays

CSTC 2-18 Windows Annex - Final Review

Flashcards110 cardsFPractice quizPHost liveL

Questions 110

Answers

1
(True / False) ntldr does not read hyberfil.sys files.
False
True
2
Boot Configuration Database replaced what?
boot.ini
userinit
ntldr
MBR
3
What happens in the following scenario if cmd1 fails? cmd1 && cmd2
cmd2 will not execute
cmd1 and cmd2 will execute
computer will restart
only cmd2 will execute
4
How is the registry structured?
Wells
Tables
Tree
Variables
5
(True / False) WMIC is based off of aliases.
False
True
6
What is the maximum length of a NetBIOS name?
15 bytes padded to 16
Infinite
255 bytes
16 bytes padded to 32
7
Which of the following is a common form for a Host Name?
Pointing
Stationary
Domain Name
Alias
8
What authority must you have to access the SAM portion of the registry?
Parser
System
Admin
User
9
What key references a subkey for each loaded user profile?
HKCU
HKCR
HKU
HKLM
10
What does a key always contain?
Value
Subkey
Subkey and value
SID
11
Which of the following is NOT a default audit log?
Application
Operating
System
Security
12
What privilege must a process have to manage the Security Event Log?
Secure Admin
SeSecurityPrivilege
API
SAMSecurityPriv
13
What must be enabled to log access to secured objects?
Audit object access policy
User rights assignment
Windows protection mode
Access protected logging
14
What key references system wide configurations?
HKCC
HKLM
HKCU
JKCU
15
Encapsulation at the Transport layer of the OSI model is known as what?
Segments
Frames
Data
Packets
16
(True / False) Bitlocker provides the best protection with a TMP of version 1.2 or later.
True
False
17
Which of the following is NOT an Application Layer protocol?
ICMP
DNS
HTTPS
SMTP
18
What is NOT a term for the text entered after a command?
Parameter
Options
Commands
Arguments
19
How many times does a Windows hosts broadcast if it cannot resolve a NetBIOS name?
12
Until it receives a response
3
15
20
Which key references the currently logged in user?
HKCU
HKKU
HKLM
HKCC
21
(True / False) Command history can be viewed using the up and down arrows in cmd.exe.
False
True
22
(True / False) The Windows boot sequence has remained the same from Windows XP to Windows 10.
True
False
23
What is the syntax for a PowerShell cmdlet?
Noun-Adjective
Noun-Verb
Verb-Verb
Verb-Noun
24
(True / False) The hosts file is directly read when resolving host names.
False
True
25
How confident are you for the exam?
No problem. Aced.
I'm going to fail for sure.
I might pass.
I should be okay.
26
What does Hypervisor-Enforced Code Integrity do?
Prevents loading of new virtual OSs
Creates hashes of the system image
Looks up code corrections
Checks signatures of system files and drivers
27
What spawns explorer.exe?
Win32.exe
startup.conf
Winload.exe
Userinit.exe
28
What local file does NetBIOS use to resolve host names?
sourcehosts
/etc/hosts
lmhosts
winhosts
29
What is stored in $numbers if you type the following in PowerShell? $numbers = 1..5
An array of integers: 1, 2, 3, 4, 5
The average sum of numbers from 1 to 5
The number 6
The number 3
30
Which of the following are one of the primary Transport Layer protocols?
IPSec
Internet Protocol
User Datagram Protocol
Transmission Control Protocol
31
Standard Bitlocker mode protects which disks on a system?
Modular
Isolated
Compact
Fixed
32
Which of these is NOT a type of command class?
Included
Internal
External
Provided
33
What is required to utilize a GPT disk?
BIOS
SATA cables
UEFI
TPM
34
(True / False) ACEs identify the SID of the owner and primary group of an object.
True
False
35
What layer of the OSI model is typically responsible for compression and encryption?
Network
Presentation
Application
Session
36
What is the registry?
Executable
Variable
A database
A flat text file
37
What is the Microsoft implementation of a NBNS?
WINS server
NetBIOS Domain Name Server
LOSS server
LMHOSTS Provider Server
38
(True / False) The CreateNamedPipe function can be used to open a pipe on a remote system.
False
True
39
What does CTRL + Right arrow do in command line?
Moves one character to the right
Moves to the end of a line
Moves one word to the right?
Moves to the beginning of a line
40
(True / False) Impersonation can be used to text client access to protected resources.
False
True
41
Which command line tool can be used to query the system's audit policy?
Auditpol.exe
PolicyLookup.exe
Eventquery.exe
Get-Policy
42
(True / False) the 16th byte of a NetBIOS name identifies the functionality of the device.
False
True
43
(True / False) The output from Cmd.exe commands are text-based?
False
True
44
(True / False) In PowerShell, foreach loops can only loop through an array of computer objects.
True
False
45
What happens if a DNS server cannot resolve a host name?
It adds the mapping to its hosts files
A resolution not found is returned to the user
It queries other DNS servers for the answer
Nothing. The server drops the request
46
Which cmd.exe command displays help information?
-?
Get-Command
Get-Help
help
47
What infrastructure can be used to centrally configure computer and user settings?
Auditpol
Event Viewer
Group Policy
Wordlists
48
What does the following redirection accomplish? >>
Sends output to the console
Functions the same as Write-Output
Appends output to the console
Appends output to a file
49
ntoskrnl shows as what process when the OS is completely booted?
csrss
svchost
lsass
system
50
Which layer of the TCP/IP model corresponds to the OSI Data Link and Physical Layers?
Application layer
Internet layer
Transport layer
Network Access layer
51
What is the purpose of a shell?
Allow users to issue commands to the computer
Provide means of logging user activity
Allow computer to issue commands to the user
To hold taco meat
52
(True / False) Auditpol.exe allows for granular control of the audit policy.
False
True
53
If the value "03" is entered in the first four bytes, what events are audited.
Failure events only
Success events only
No auditing
Success and failure events
54
Where is the audit policy stored in the registry?
hklm\\applications\policy\poladtev
hklm\\security\policy\poladtev
hkcu\\policy\auditpol
hkcu\\sources\poladtev
55
Windows PowerShell is written on which framework?
Java
PHP
C++
.NET
56
What Sysinternals tool replaced "eventquery.vbs" to view event logs?
psloglist.exe
eventquery.exe
listevents.exe
Get-Events
57
(True / False) The DNS resolver cache is located at C:\windows\system32\dnscache
True
False
58
What does userinit start by default?
lsass.exe
1337.exe
explorer.exe
csrss.exe
59
Which of the following is widely considered the most secure operating system?
Windows 10
Windows 7
Windows Server 2012
Windows XP
60
(True / False) The LM format password hash can only accept passwords up to 16 chars.
False
True
61
What key references the current hardware profile?
HKCC
HKCR
HKCU
HKLM
62
Which layer of the TCP/IP model corresponds to the OSI Network Layer?
Network Access layer
Application layer
Network Interface layer
Internet layer
63
Which of the following is NOT a default time for reading the registry?
During initial boot process
During kernel boot process
During user sign off
During user logon
64
(True / False) PowerShell is object-oriented.
True
False
65
What is the HAL responsible for?
Passing message between clients/servers
Insulates drivers utilizing APIs
Coordinating power events
Managing system registry
66
(True / False) cmd.exe is a text-based shell.
False
True
67
Why are host names used?
They are encoded to be equivalent to IP addresses
They're easier to remember than IP addresses
They're easier for machines to understand
They're universal across all languages
68
(True / False) An MBR can have more than one active partition.
False
True
69
Which layer of the OSI model involves the actual transmission medium?
Application
Data-link
Physical
Transport
70
Which of the following OSI layers is NOT in the media layers?
Transport
Network
Physical
Data Link
71
NetBIOS is best described as:
An API
A scripting language
A database
A complement to DNS
72
(True / False) Tab completion is only available in cmd.exe.
False
True
73
(True / False) UEFI provides signature validation of core drivers and boot loaders.
True
False
74
(True / False) SMBv1 is a secure protocol.
False
True
75
(True / False) Domain user passwords are stored in the Active Directory database.
False
True
76
What process is the Security Accounts Manager service loaded into?
svchost
lsass
scrss
forlulz
77
Which key references file extension associations?
HKLM
HKCU
HKCR
HKCC
78
(True / False) Cmd.exe provides object-based output to the user.
True
False
79
Which of the following is a valid registry hive?
HKEY_CLASSES_OWNER
HKEY_LOCAL_CONFIG
HKEY_CURRENT_USER
HKEY_CURRENT_COMPUTER
80
Which of the following does a security descriptor contain?
Access tokens
Group names
User SID
User names
81
Which of the following is NOT an SMBv1 message type?
system message
message message
session control message
file message
82
Which port and protocol does NBNS use for queries?
udp / 137
tcp / 4444
tcp / 8080
tcp / 445
83
(True / False) Windows PowerShell interacts with the .NET framework.
False
True
84
What does the variable $_ represent?
The current value in the pipeline or loop
A null variable
A physical glove used in the sport of baseball
An array of integers
85
(True / False) Access tokens contain the SIDs of all groups a user belongs to.
False
True
86
Where are PowerShell variables stored?
In memory
In the cloud
C:\windows\system32\windows powershell\v1.0\variables
$env:userprofile\variables
87
(True / False) Mailslots write their contents to C:\windows\system32\mailslot
True
False
88
Which cmdlet can be used to prompt the user for their credentials in PowerShell?
Get-Credential
Credential-Provider
Invoke-Credential
Pass-The-Hash
89
What does the following command accomplish? cmd1 | cmd2
The output of cmd2 is output to a file named cmd1
The output of cmd1 is output to a file
The output of cmd1 is fed into cmd2
The ouput of cmd2 is fed into cmd1
90
When an SMBv1 system wants to talk to an SMBv2.2 system, what happens?
SMBv1 is the most recent version
SMB is not backwards compatible
The SMBv2.2 system lowers its version to SMBv1
SMBv1 system automatically upgrades to SMBv2.2
91
At what layer of the OSI model does RPC operate?
Application
Data Link
Transport
Session
92
What is the TTL of DNS resolver cache entries from the hosts file?
128
They are reloaded every query
Essentially infinite
255
93
What is the maximum length of a Host Name?
256
16
16
255
94
What does ESC do in the command line?
quits cmd.exe
executes the current command
clears the current command
copies the current line of text
95
What can WS-Management be used for?
Configuring just the local machine
Configuring either local or remote machines
Parsing WMI information
Configuring just remote machines
96
NetBIOS Name Service uses what port and protocol?
tcp / 137
udp / 137
udp / 445
tcp / 445
97
(True / False) Winsock Kernel natively supports IPv6.
True
False
98
What command can be used to view the DNS resolver cache?
ipconfig /showdns
ipconfig /displaydns
ipconfig /all
ipconfig /flushdns
99
What identifier is used to look up user access?
User state
Username
Single signed token
SID
100
(True / False) The encoded audit policy can be changed by an admin account.
True
False
101
Encapsulation at the Network layer of the OSI model is know as what?
Segments
Bits
Data
Packets
102
What is boot.ini used for?
Manage Windows services
Starting user sessions
Kernel Imaging
Determine the OS to load
103
What type of account is the following SID associated with? S-1-5-DOMAIN-500
Domain Admins Group
Guest
Administrator
User
104
What is the maximum data size a mailbox can receive from a remote machine?
424 bytes
424 kb
4224 bits
424 mb
105
What does the command set provide?
Shell staus
Network connections
IP addressing information
Environment variables
106
(True / False) RID values are reused.
True
False
107
What is a SID associated with?
User
Script
File
Folder
108
Which is an example of a Local Authority SID?
S-1-2
S-1-0
S-1-5
S-1-4
109
(True / False) Objects in an array can be individually accessed.
False
True
110
(True / False) Command prompt history is available after closing the session.
False
True

Windows - Final Flashcards | StudBud