📝 Exam Notes: Windows Operating Systems Overview
Topic 1: Windows Architecture (The Two Modes)
Q: What is the difference between OS Architecture and Features?
A:
● Features define what an operating system can do (e.g., run applications,
connect to Wi-Fi).
● Architecture defines how the operating system works to provide those
features. It is the core operational methodology of the OS.
Q: What are the two main layers, or modes, of the Windows OS architecture?
A: The Windows architecture is divided into two main modes:
1. User Mode: This is the non-privileged mode where applications (like
Microsoft Word or Excel) and environment subsystems run.
2. Kernel Mode: This is the privileged mode where the core operating system
(the kernel) and other low-level processes (like device drivers) operate.
Topic 2: Kernel Mode vs. User Mode (The "Rings")
Q: How do "Rings" relate to Kernel Mode and User Mode in Windows?
A: "Rings" are a concept from CISC processors (like x86) that define the level of
access or privilege a process has.
● Kernel Mode runs in Ring 0, which is also known as "privileged mode." It has
complete access to all system hardware and memory, like a "God mode" in a
game.
● User Mode runs in Ring 3, which is also known as "non-privileged mode." It
has limited access.
Q: How do these two modes interact?
A: Windows uses only Ring 0 and Ring 3 to create a simple and secure system.
● A process in Ring 3 (User Mode) cannot directly access hardware or critical
system memory.
● To perform a privileged action (like reading from a hard drive or sending data
to the network), the User Mode application must make a request to a process
in Ring 0 (Kernel Mode).
● The Kernel Mode process then performs the action on behalf of the
application and returns the result. This prevents applications from crashing
the entire system.
Topic 3: Components of User Mode and Kernel Mode
Q: What are the key components that run in User Mode?
A:
● User Applications: The actual programs the user runs (e.g., Excel, Photoshop,
web browsers).
● Service Processes: Background processes that run without a user, such as
the Print Spooler or Task Scheduler.
● System Support Processes: Manages the system, such as the logon process
and session manager.
● Environment Subsystems: These allow different types of applications to run.
For example, the 32-bit subsystem allows 32-bit applications to run on a
64-bit Windows OS.
● Subsystem DLLs: These act as translators. They take standard function calls
from an application and translate them into native system calls that the
Kernel Mode can understand.
Q: What are the key components that run in Kernel Mode?
A:
● Executive: Provides the base OS services, such as memory management,
process and thread management, security, and I/O.
● Kernel: The absolute core of the OS. It controls the CPU, manages thread
scheduling, process switching, and handles hardware interrupts.
● Hardware Abstraction Layer (HAL): This is a critical layer that hides
hardware differences from the OS. It makes different motherboards, memory
modules, and system timers all look the same to the Kernel and Executive.
● Device Drivers: These are dynamic libraries that allow the OS to
communicate with and control specific hardware devices (like a graphics
card, printer, or network card).
● Windowing and Graphics System: This component is responsible for
implementing the GUI, such as drawing windows, buttons, and user controls.
Topic 4: Windows vs. Other Operating Systems
Q: What is a key architectural difference between Windows and Linux?
A: A key difference is in how they handle graphics processing:
● Windows includes the windowing and graphics system inside the Kernel
Mode (Ring 0). This can potentially improve graphics performance.
● Linux runs its graphics system outside the kernel (in User Mode). This can
potentially improve stability, as a crash in the graphics system will not crash
the entire OS kernel.
Topic 5: Windows Interfaces
Q: What are the three primary interfaces for using the Windows OS?
A:
1. Graphical User Interface (GUI): The main visual interface with icons,
windows, and menus that most users interact with.
2. Command Prompt: A text-based, command-line interface used by
administrators for tasks.
3. Windows PowerShell: An advanced, task-based command-line shell and
scripting language used by administrators for automation and system
management.