nerdexam
GIAC

GCFA · Question #169

which of the following Windows XP system files handles memory management, I/O operations, and interrupts?

The correct answer is D. Kernel32.dll. Kernel32.dll is a foundational Windows DLL that exposes core system APIs for memory management, I/O, and process control to user-mode applications.

Advanced Windows Artifacts & Browser Forensics

Question

which of the following Windows XP system files handles memory management, I/O operations, and interrupts?

Options

  • ANtoskrnl.exe
  • BWin32k.sys
  • CAdvapi32.dll
  • DKernel32.dll

How the community answered

(31 responses)
  • A
    3% (1)
  • B
    6% (2)
  • C
    10% (3)
  • D
    81% (25)

Why each option

Kernel32.dll is a foundational Windows DLL that exposes core system APIs for memory management, I/O, and process control to user-mode applications.

ANtoskrnl.exe

Ntoskrnl.exe is the Windows NT kernel executable that operates in kernel mode and performs actual hardware-level operations, but it is not the user-accessible system file described in the context of this question.

BWin32k.sys

Win32k.sys is a kernel-mode driver responsible for the Windows graphical subsystem including window management and GDI rendering, not memory management or interrupt handling.

CAdvapi32.dll

Advapi32.dll is the Advanced API library handling security functions, registry access, and cryptographic services - not memory management or I/O operations.

DKernel32.dllCorrect

Kernel32.dll is one of the primary Windows system libraries providing user-mode access to low-level operations including memory management functions such as VirtualAlloc and HeapAlloc, file I/O operations via CreateFile and ReadFile, and core process and thread management. It serves as the principal interface between applications and the underlying system for these essential operations.

Concept tested: Windows XP core system file responsibilities

Source: https://learn.microsoft.com/en-us/windows/win32/apiindex/windows-apisets

Topics

#Windows system files#Kernel32.dll#memory management#Windows kernel components

Community Discussion

No community discussion yet for this question.

Full GCFA Practice