nerdexam
GIAC

GCFA · Question #289

Which of the following statements about the NTDETECT.COM file is true? Each correct answer represents a complete solution. Choose three.

The correct answer is A. It is used to gather information about currently installed hardware on the computer. B. It is a startup file of the Windows NT/2000 operating system. C. It is located in the root of the startup disk.. NTDETECT.COM is a Windows NT/2000 startup component responsible for hardware detection and must reside in the root of the boot disk.

Advanced Windows Artifacts & Browser Forensics

Question

Which of the following statements about the NTDETECT.COM file is true? Each correct answer represents a complete solution. Choose three.

Options

  • AIt is used to gather information about currently installed hardware on the computer.
  • BIt is a startup file of the Windows NT/2000 operating system.
  • CIt is located in the root of the startup disk.
  • DIt is used to dual-boot a computer.

How the community answered

(36 responses)
  • A
    78% (28)
  • D
    22% (8)

Why each option

NTDETECT.COM is a Windows NT/2000 startup component responsible for hardware detection and must reside in the root of the boot disk.

AIt is used to gather information about currently installed hardware on the computer.Correct

NTDETECT.COM scans the system during boot to collect hardware information such as CPU type, bus type, and installed devices, then passes this data to NTLDR for proper OS initialization. This hardware detection role is its primary function in the Windows NT/2000 startup sequence.

BIt is a startup file of the Windows NT/2000 operating system.Correct

NTDETECT.COM is a mandatory startup file in Windows NT/2000, invoked by NTLDR immediately after the boot sector hands off control. Without it, the OS cannot complete the hardware initialization phase and will fail to boot.

CIt is located in the root of the startup disk.Correct

NTDETECT.COM must be placed in the root directory of the system partition (typically C:\) so that NTLDR can locate and execute it. Its placement is fixed and required for the boot process to succeed.

DIt is used to dual-boot a computer.

Dual-boot configuration is controlled by the BOOT.INI file in conjunction with NTLDR, which presents the OS selection menu. NTDETECT.COM only performs hardware detection and plays no role in selecting or switching between operating systems.

Concept tested: Windows NT/2000 boot process NTDETECT.COM role

Source: https://learn.microsoft.com/en-us/troubleshoot/windows-server/performance/windows-nt-boot-process

Topics

#NTDETECT.COM#Windows boot process#Windows NT/2000#startup files

Community Discussion

No community discussion yet for this question.

Full GCFA Practice