EC-Council: Computer Hacking Forensic Investigator(CHFI-V10)
Module 6 : Windows Forensics
         
Questions available : 94 You are not logged in.
Please Login for track your learning progress
   
 
Q. No: 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 |
Go to Question No.



Question No 0

If you want to share the link of this question, please click here to "Copy Question Link" and share that generated link. Link from URL may change in future.
 
   
Bookmark this Question
QID: 717  
   
What file is processed at the end of a Windows XP boot to initialize the logon dialog box?


 
A:    NTOSKRNL.EXE
  
B:    NTLDR
C:    LSASS.EXE
  
D:    NTDETECT.COM
 
         

 
 

Diffence opinion in Correct Answer or any comment?
Vote / Comment for correct Answer



Comunity Comments:

Banwari on 17/05/2025
Opted Answer: A
LSASS.EXE (Local Security Authority Subsystem Service) is responsible for handling user authentication and enforcing security policies.

It is launched after the Windows kernel and Session Manager (SMSS.EXE) complete their initialization.

LSASS.EXE ensures that the logon process is properly executed, allowing users to enter their credentials.

NTOSKRNL.EXE: The Windows kernel, responsible for managing system processes.

NTLDR: The bootloader for Windows XP, loading the operating system.

NTDETECT.COM: Detects hardware components during startup.
0 
0 

















WELCOME TO ONLINE EXAM PREPARATION SYSTEM

Certification Examinations