312-49 · Question #29
312-49 Question #29: Real Exam Question with Answer & Explanation
The correct answer is A. Ntldr. Ntldr (NT Loader) is the boot loader used in Windows NT, 2000, XP, and early versions. It reads the Boot.ini file (which contains the OS boot menu options) and then loads the core OS components: Ntoskrnl.exe (the NT kernel), Bootvid.dll (boot video driver), Hal.dll (Hardware Abst
Question
Options
- ANtldr
- BGdi32.dll
- CKernel32.dll
- DBoot.in
Explanation
Ntldr (NT Loader) is the boot loader used in Windows NT, 2000, XP, and early versions. It reads the Boot.ini file (which contains the OS boot menu options) and then loads the core OS components: Ntoskrnl.exe (the NT kernel), Bootvid.dll (boot video driver), Hal.dll (Hardware Abstraction Layer), and boot-start device drivers. Although Windows 7 replaced Ntldr with bootmgr and Boot.ini with the BCD (Boot Configuration Data) store, exam questions in legacy forensics contexts still reference Ntldr in this capacity.
Topics
Community Discussion
No community discussion yet for this question.