Question

Match each term with the correct description.

Choose an tem. NTFS MFT attributes used to implement the B-tree structure for very large directories Reparse point Choose an tem. Describe the locations of all attribute records that do not fit in the MFT record 2 RegQueryValueEx Function Choose an tem. Randomized address space memor protection process that is used to mitigate against Return-Oriented Programming attacks Access token 4 NtNotifyChangeDirectoryFile Ch tem oose an Security descriptor for some executive objects 5 Arcname Choose an Changes the protection on a region of committed pages in the virtual address space of the calling process. tem 6 Attribute list 7 VirtualQuery Function Choose an tem Partition names discovered by the boot loader Bitmap Choose an tem. Retrieves the type and data for the specified value name associated with an open registry ke 9 ASLR Choose an tem Retrieves information about a range of pages in the virtual address space of the calling process 10 VirtualProtect Function Choose an tem Used for mounting and symbolic links Choose an tem. Requests notification when any file in a directory or subtree is modified

Answer 1

NTFS MFT attributes used to implement the b tree structure for very large directories -> 8.Bitmap

Describe the location of all attribute records that do not fit in the MFT record -> 6. Attribute list

Randomized address space memory protection process that is used to mitigate against return oriented programming attacks   -> 9. ASLR

Security descriptor for some executive objects -> 3. Access token

Changes the protection on a region of committed pages in virtual address space of the calling process ->10. vitualProtect Function

Partition names discovered by the boot loader ->5 \Arcname

retrieves the type and data for the specified value name associated with an open registry key    ->2 RegQueryValueEx Function

retrieves information about a range of pages in the virtual address space of the calling process -> 7.VirtualQuery Function

used for mounting and symbolic links -> 1. Reparse point

requests notification when any files in a directory or subtree is modified -> 4 NtNotifyChangeDirectoryFIle