nerdexam
EC-Council

312-49 · Question #29

312-49 Question #29: Real Exam Question with Answer & Explanation

The correct answer is A. Ntldr. Ntldr (NT Loader) is the boot loader used in Windows NT, 2000, XP, and early versions. It reads the Boot.ini file (which contains the OS boot menu options) and then loads the core OS components: Ntoskrnl.exe (the NT kernel), Bootvid.dll (boot video driver), Hal.dll (Hardware Abst

Submitted by carter_n· Apr 18, 2026Disk Forensics

Question

In Windows 7 system files, which file reads the Boot.ini file and loads Ntoskrnl.exe. Bootvid.dll. Hal.dll, and boot-start device drivers?

Options

  • ANtldr
  • BGdi32.dll
  • CKernel32.dll
  • DBoot.in

Explanation

Ntldr (NT Loader) is the boot loader used in Windows NT, 2000, XP, and early versions. It reads the Boot.ini file (which contains the OS boot menu options) and then loads the core OS components: Ntoskrnl.exe (the NT kernel), Bootvid.dll (boot video driver), Hal.dll (Hardware Abstraction Layer), and boot-start device drivers. Although Windows 7 replaced Ntldr with bootmgr and Boot.ini with the BCD (Boot Configuration Data) store, exam questions in legacy forensics contexts still reference Ntldr in this capacity.

Topics

#Windows Boot Process#Ntldr#System Files#Operating System Fundamentals

Community Discussion

No community discussion yet for this question.

Full 312-49 Practice
In Windows 7 system files, which file reads the Boot.ini file and... | 312-49 Q#29 Answer | NerdExam