1Session Manager = [?].exe,smss,win_processes
 2
 3# csrss
 4Client/Server Runtime Subsystem - [?].exe,csrss,win_processes
 5Provides the user mode side of the win32 subsystem - [?].exe,csrss,win_processes
 6Responsible for win32 console handling and GUI shutdown - [?].exe,csrss,win_processes 
 7
 8Windows Initialization - [?].exe,wininit,win_processes
 9
10# scm
11Service Control Manager - [?].exe,services,win_processes
12Windows system process which starts stops and intereacts with service processes - [?].exe,services,win_processes
13[T/F] %SystemRoot%\System32\services.exe is the correct location for this executable.,T,win_processes    
14[T/F] %SystemRoot%\services.exe is the correct location for this executable.,F,win_processes  
15
16# lsass
17Local Security Authentication Server - [?].exe,lsass,win_processes
18Windows system process which enforces the security policy on the system - [?].exe,lsass,win_processes
19Windows system process which verifies users - [?].exe,lsass,win_processes
20Windows system process which handles password changes - [?].exe,lsass,win_processes
21Windows system process which creates access tokens - [?].exe,lsass,win_processes
22[T/F] %SystemRoot%\System32\lsass.exe is the correct location for this executable.,T,win_processes    
23[T/F] %SystemRoot%\lsass.exe is the correct location for this executable.,F,win_processes  
24
25# explorer
26[T/F] %SystemRoot%\System32\explorer.exe is the correct location for this executable.,F,win_processes    
27[T/F] %SystemRoot%\explorer.exe is the correct location for this executable.,T,win_processes  
28
29Local Session Manager - [?].exe,lsm,win_processes
30Login Process - [?].exe,winlogon,win_processes