GIAC Certified Forensic Analyst (GCFA) — Question 15

Which of the following modules of OS X kernel (XNU) provides the primary system program interface?

Answer options

• A. BSD
• B. LIBKERN
• C. I/O Toolkit
• D. Mach

Correct answer: A

Explanation

The BSD module is responsible for providing the main system program interface, handling system calls and user-space interactions. LIBKERN and I/O Toolkit serve different purposes, such as providing kernel utilities and managing input/output operations, respectively. Mach is the microkernel that provides fundamental operating system services but does not serve as the primary interface for system programs.