Client Systems · Comprehensive Guide

Block 2 Study Guide

Every unit from the Block 2 course — end user devices, operating systems, client security & policies, and OS installation — each with its own quiz.

// Start-up sequence

Power on → POST → bootstrap loader → OS

Pressing the power button wakes the power supply, which checks its own output voltage then signals the CPU over the "power good" wire. The CPU immediately jumps to a built-in address holding the POST (Power-On Self-Test) program in motherboard ROM. POST has every device run its own diagnostic and report back — failures show as beep codes (one long + two/three short = bad video; one repeating beep = bad/missing RAM) or on-screen text errors.

After POST, control passes to the bootstrap loader in BIOS, which reads CMOS settings to know which storage device to check first for a bootable OS (a device with a valid boot sector). If no bootable device is found anywhere in the CMOS boot order, you get "boot device not found."

// BIOS vs UEFI

BIOS is non-volatile firmware permanently stored on motherboard ROM that provides "basic life support" to initialize hardware at startup — now considered legacy. UEFI (Unified Extensible Firmware Interface) replaced it starting in 2007 and is standard on nearly everything made since 2014, adding better bootstrapping, network booting, disk partitioning, hardware security, a modern GUI, and cryptography — while still supporting legacy BIOS compatibility. Many technicians still call both of them "BIOS" out of habit.

// RAM — DRAM vs SRAM

RAM is volatile "main memory" where the CPU actively works (unlike non-volatile storage, which holds data long-term). DRAM (Dynamic RAM) stores each bit as a charge in a capacitor that leaks and must be refreshed thousands of times a second — cheap but comparatively slow. SRAM (Static RAM) stores each bit in a flip-flop circuit that never needs refreshing — much faster, but more expensive and lower density, which is why it's used for CPU cache while DRAM forms the bulk of system memory.

Memory ships on sticks: SIMM/DIMM (desktop), SO-DIMM (laptops/small form factor). DDR (Double Data Rate) SDRAM transfers on both the rising and falling clock edge; each generation (DDR2 → DDR5) roughly doubles speed, with DDR5 also adding on-chip error correction and per-module power management. ECC RAM can detect and correct errors on the fly but is rarely used today. CMOS RAM (a type of SRAM) remembers hardware settings using a small battery; VRAM lives on the graphics card and determines resolution/color depth.

// Major memory failure & clock speed

A major memory failure locks up the system, typically via a Non-Maskable Interrupt (NMI, an interrupt the CPU can't ignore) or a General Protection Fault (GPF — often two applications fighting over the same memory block). Both can produce a Blue Screen of Death (BSOD). Clock speed is the fastest rate a CPU can operate, generated by a quartz oscillator — from 4.77MHz on the 1979 Intel 8088 to 5GHz+ on modern CPUs, sometimes pushed further via overclocking.

// Deep dive already on the site

Full Motherboards & Core Components page →

Form factors (ATX/μATX/ITX), Northbridge/Southbridge chipset, PCI/PCIe, and more — with its own quiz.

Quick summary: the motherboard's chipset is split into Northbridge (fast interface between CPU, RAM, and video — often integrated into the CPU on modern systems) and Southbridge (slower devices like USB and disk controllers; called the I/O Controller Hub on Intel, Fusion Controller Hub on AMD). ROM stores small permanent programs called services (now usually flash memory, updatable by "flashing"). CMOS is the battery-backed menu of user hardware settings — commonly confused with BIOS, but BIOS is the code, CMOS is the settings menu it exposes.

A bus is a data pathway. The system bus connects major components and is made of three parts: the address bus (which memory location to access), the control bus (status signals, e.g. is the CPU reading or writing), and the data bus (the actual bidirectional data). The internal/local bus connects components to the motherboard itself; the external bus reaches outward to peripherals; the expansion bus connects to expansion slots like PCIe.

Three main internal structures: the Control Unit (directs the CPU, provides timing/control signals to memory, ALU, and I/O), the ALU (Arithmetic Logic Unit — performs math/logic operations on binary integers), and Registers (small, extremely fast holding places for an instruction, address, or data — sized to match the CPU's word length, e.g. 64 bits).

CPU cache is a 3-level hierarchy (L1/L2/L3) of SRAM sitting in or next to the CPU, storing frequently-used data to avoid slower round-trips to main RAM. PGA (Pin Grid Array) CPUs have pins on the chip itself, easily bent during installation; LGA (Land Grid Array, standard since 2004) flips this — flat contacts on the chip, pins built into the motherboard socket — making installation safer.

// Deep dive already on the site

Full Storage Media page →

HDD internals, SSD, optical media, magnetic tape, flash memory, and HDD performance metrics — with its own quiz.

Quick summary: storage (secondary memory) is non-volatile, unlike RAM. It falls into three categories — magnetic (HDD, tape), optical (CD/DVD/Blu-ray), and solid-state (SSD, flash/thumb drives, SD cards). Flash memory is non-volatile, silent, has no moving parts, and is ideal for battery-powered devices — but costs more per GB than HDD and wears out after a finite number of write cycles.

A video card contains a GPU (a dedicated microprocessor that offloads graphics work from the CPU), its own VRAM, a video BIOS, and a RAMDAC (converts the GPU's digital signal into analog for older displays).

PortNotes
SVGALegacy analog standard for CRT displays
DVIDigital, for LCDs/plasma/projectors, reduced distortion vs SVGA
HDMIAll-digital audio/video, aims to replace all older standards
DisplayPortMultiple independent streams — up to 4 monitors from one port
USB (video adapter)Dongle-based, economical way to add a monitor with no free video port

A NIC connects a computer to a network — built into the motherboard or a separate expansion card, wired (RJ-45 Ethernet port to a switch) or wireless (small antenna to an AP). Every NIC has a unique 48-bit hex MAC address burned in at manufacture; no two NICs on the same network can share one. A NIC operates at both OSI Layer 1 (physical access to the medium) and Layer 2 (MAC addressing).

Pressing a key generates a unique scan code, stored in a register and passed to the keyboard controller — handled by BIOS code, not the OS, which is why a keyboard works before an OS even loads. The keyboard is the primary human interface; the mouse is an alternate cursor-control device.

Every I/O device gets a unique I/O port address (like a street address, so the processor knows who it's talking to) and can raise an IRQ (Interrupt Request) to tell the CPU "pause and handle me" — a sound card finishing playback or a printer finishing a job, for example. An interrupt controller prioritizes incoming IRQs before forwarding them to the CPU. Device drivers are the software that lets the OS talk to hardware; installing the wrong driver (or an unsigned one not on the Hardware Compatibility List) can cause malfunctions.

The USB host controller (built into the chipset) manages every connected device through a root hub, which can theoretically support up to 127 devices — though piling that many onto one bus in practice slows everything down and strains DC power delivery. USB devices fall into 21 classes by function, e.g. HID (Human Interface Device — keyboards, mice, controllers) and Mass Storage Class (flash drives, external HDDs). USB Power Delivery (USB PD) now supports 5V/9V/12V/20V, up to 5A and 100W — enough to charge a laptop.

A sound card inputs/outputs audio for music, video editing, presentations, and games — often integrated into the motherboard rather than a separate expansion card. A line-in jack accepts analog audio sources; a separate microphone jack accepts the lower-voltage signal typical of mics, commonly used for speech recognition or VoIP.

A PSU converts AC wall power (100/120V or 220/240V) into low-voltage DC for internal components, following the ATX form factor for interchangeability. ATX supplies output +3.3V, +5V, -5V, +12V, and -12V "rails" (color-coded: black=ground, orange=+3.3V, red=+5V, yellow=+12V) and turn on/off via a motherboard signal. Common connectors: the large 20/24-pin motherboard connector, 4-pin Molex (drives), "P4" 4-pin auxiliary (CPU power), SATA power, and 6/8-pin PCIe (graphics cards).

PSU form factorOptimized for
TFX12VLow-profile ATX systems
SFX12VFlexATX systems
CFX12VmicroBTX systems (L-shaped)
LFX12VLow-profile BTX systems

PSUs range roughly 200W–1800W and are efficiency-rated by the voluntary 80 Plus program: 80 Plus → Bronze → Silver → Gold → Platinum → Titanium (up to 96% efficient), with cost and quality rising up the scale.

Heat sinks (aluminum, copper, or brass fins) dissipate CPU/GPU heat by radiation and convection; thermal paste fills microscopic gaps between the chip and heat sink for much better conduction than air alone. Modern systems add active cooling — CPU fans, case fans (front-intake/rear-exhaust patterns), and for high-end builds, liquid cooling (a heat exchanger on the CPU, pumped coolant, and a radiator with its own fans) for far more effective heat transfer than air.

// Governed by DAFMAN 17-1203

System software (the OS and utilities managing hardware at a low level) underlies application software (the programs that do real user-facing work). COTS (Commercial Off-The-Shelf) software like Microsoft Office is ready-made and purchased, not custom-built.

Copyright grants exclusive rights to publish/sell/distribute a work. A license agreement only grants the right to use software under specific terms — the publisher retains ownership. An Enterprise License covers many copies under one organization-wide agreement (often more cost-effective than individual licenses); an Enterprise Software Agreement (ESA) is the contract vehicle for acquiring it.

Before software can run on an Air Force network, it must appear on the DoDIN Approved Product List (APL) — a 13–15 month certification process managed by DISA's Approved Products Certification Office (APCO), covering both Cybersecurity/IA testing (STIG-compliant configuration) and Interoperability testing.

GUI

Desktop, windows, icons, fonts, taskbar — hides hardware/software complexity from the user.

Command prompt

Text-only control (Windows CMD/PowerShell, Linux terminal) for tasks the GUI can't do.

Security

Passwords, file encryption, and privilege levels (user vs admin) control access.

File system

Organizes data into directories/folders, separates user files from system files.

Networking

Built-in support for standard protocols (Ethernet, TCP/IP) plus a GUI to manage connections.

Update

A mechanism to stay patched, usually over the network, automatic or user-controlled.

// The kernel

The kernel is the OS's core, loading first and providing the most basic hardware control — much of it is device drivers. Its primary job is resource management: CPU scheduling (which running program gets processed when), RAM allocation, and I/O device access.

// OS vs BIOS

BIOS provides hardware drivers, a basic settings interface, and some security — but it isn't an OS. Its entire purpose is to hand control to an OS as soon as one can boot. BIOS/firmware is small and rarely updated; software (including the OS) is regularly updated and can fully exploit hardware capabilities that firmware only minimally supports.

Modern desktop operating systems

First released 1985 as a graphical shell over MS-DOS. Windows 2000 onward runs on the NT kernel and no longer depends on DOS, though legacy DOS commands survive in CMD/PowerShell. Proprietary and closed-source — restrictive EULAs prohibit viewing or modifying source code. Forms the foundation of the Air Force's Standard Desktop Configuration.

Most popular UNIX versions today are free and open-source, without expensive licensing — widely adopted in industry and academia. Rare on personal desktops now, but still common as a programmer's development environment, and on embedded devices, supercomputers, servers, and routers.

UNIX-based, built on the open-source Darwin kernel plus ideas from FreeBSD, though the GUI/window manager/desktop tools that give it its look are closed-source and proprietary.

Free, open-source, UNIX-like. An OS is built on the Linux kernel by adding a GUI, window manager, file manager, etc. — Ubuntu, Debian, Fedora, Red Hat, Android, and ChromeOS are all examples. All of the world's top 500 supercomputers run Linux (2020), and Android (Linux-based) held ~87% of the mobile market as of 2019 — but it's rare on desktops/laptops outside of Chromebooks.

Runs on Chromebooks with the Chrome browser as the primary interface; both user data and apps are cloud-based. Gained the ability to run Android apps (Google Play Store) and, since 2018, Linux applications natively.

iOS

Apple, 2007, closed-source (some open components)
Built on Darwin XNU (FreeBSD-based) kernel
~1.4 billion phones worldwide (2022), #2 by share
"Walled garden" — Apple App Store only

Android

Google (acquired 2005), released 2008, Linux-based
Free/open-source; "Android" trademark requires licensing
~72% global mobile share, ~3 billion users (2022)
Supports "sideloading" — a real security concern
// Mobile security concernsSmall size means phones are lost/stolen more often; always-on wireless radios (cellular, Wi-Fi, Bluetooth, NFC, GPS) widen the attack surface; and third-party apps aren't always rigorously tested. Units may require completion of "Using Mobile Devices in a DoD Environment" training and may restrict or ban personal devices at the workplace.
ApplicationWhat it's for
Microsoft OfficeWord, Excel, PowerPoint, Outlook, Teams, and more — since 2013 mainly delivered as Office 365
SharePointWeb-based document management/collaboration integrated with Office
EdgeMicrosoft's browser, replaced Internet Explorer, now Chromium-based
Internet ExplorerLegacy Microsoft browser, officially retired June 2022
ChromeGoogle's browser, built on open-source Chromium, most popular worldwide
Adobe AcrobatView/create/edit PDF files; Acrobat Reader is free, full Acrobat is paid
McAfeeDoD-wide cybersecurity vendor — antivirus, endpoint protection (EDR), CDM
// From FDCC to the SDC

FDCC (Federal Desktop Core Configuration) mandated standardized, hardened Windows settings across federal networks starting 2008 — for XP/Vista only. It was replaced by USGCB for Windows 7. Since 2016 the Air Force uses the Standard Desktop Configuration (SDC), a single managed disk image deployed enterprise-wide — locked down, no admin rights for normal NIPRNET users, and a limited software store. It's a deliberate trade-off between usability and security.

Security protects the system from unauthorized access (remote attack or physical tampering); privacy protects the user's identity, contacts, location, and browsing data. The two overlap — a security breach can expose private data, and vice versa.

Account types (Microsoft account installs)

AccountPrivileges
AdministratorFull control of the system, creates/manages other accounts
StandardCan use most of the computer, no access to admin files, changes stay scoped to their own account
ChildA Standard account with Family Safety settings enabled
GuestNo name recognition, no privacy from the admin, can't install software (deprecated in later Windows 10)
KioskNo login required, locked to a single application, can't make system changes

A Local account needs no Microsoft sign-in or network connection — better privacy, but loses App Store, full Cortana, sync, and OneDrive integration that a Microsoft account provides.

Update, password, antivirus, firewall

An unpatched OS is a network vulnerability — clients too far behind on updates can be denied network access until re-imaged. Password policy (length, complexity, expiration, lockout thresholds) defends against brute-force and password-spraying attacks. Antivirus compares files against known virus-definition "fingerprints" (effective against known threats) or uses heuristics — watching for suspicious behavior rather than known signatures — to catch new, zero-day malware. Windows 10 bundles Microsoft Defender for free. A firewall (hardware, e.g. a router; or software, e.g. Windows' built-in firewall) filters traffic against a rule set — one layer among several in a defense-in-depth strategy.

Applying a STIG to a Windows 10 client is a hands-on lab exercise — see Block 1's Publications unit for what a STIG actually is and how its severity categories work.

Buying software buys a license to use it under specific terms — not the software itself. Any use beyond the license's scope is piracy, deliberate or not, and it's illegal either way.

  • Corporate/end-user piracy — under-reporting installs from a volume license, making more copies than licensed, or installing on an unrestricted server.
  • Internet piracy — distributing keys/serials/cracked copies, undermining copy protection, or offering software outside an authorized distribution channel.
  • Subscription piracy — using subscription software past its paid period.
  • Counterfeiting — copying the product and its packaging to look like the original.
// Who's responsible (DAFMAN 17-1203)

Ultimate responsibility sits with the Chief Information Officer (SAF/CN). Each installation's Accountable Property Officer (APO) appoints a Base Software License Manager (BSLM), who runs annual software inventories, monitors licenses, trains CSTs/helpdesks, and performs compliance visits. Individual organizations must keep proof-of-license records and audit for unauthorized copies.

// Penalties

Civil: repayment of losses plus any profits earned, plus a court-imposed fine up to $150,000 per violation. Criminal (if treated as akin to theft): up to 5 years in jail and a fine up to $250,000.

DoD 5500.07-R (Joint Ethics Regulation) limits government communications systems to official use and authorized purposes — brief personal use (checking in with family, scheduling appointments) is allowed only if it doesn't hurt duty performance, is reasonable in duration/frequency, and doesn't reflect poorly on DoD (no pornography, chain letters, unofficial advertising, or classified material). Per DoD Instruction 8560.01, using government systems is consent to monitoring, and usage is never anonymous — your name and computer address are logged. Classified information may never be transmitted except through approved secure procedures, and access credentials (like passwords) must never be shared.

MethodHow it works
Clean installBare-metal install from DVD/USB on one PC at a time — most labor-intensive, impractical at scale
Disk cloneExact copy of one HDD onto another, including OS/settings/apps — needs matching hardware; software licenses can't be cloned
Network boot (PXE)Boots over the LAN from a remote server via a BIOS service ("pixie") — full admin control, often scripted for unattended install
AzureMicrosoft's cloud service can provide access to preconfigured Windows machines over the network
Windows AutopilotPaid Microsoft service — new PCs pre-registered with Microsoft auto-provision on first network connection, no IT hands-on required

Preparation: a working PC, backup media for existing files, access to CMOS/BIOS settings (with password if set), installation media (DVD/USB, or a Microsoft-downloaded .iso burned with the Media Creation Tool), and an activation key (from purchased media, printed on the PC, a "digital entitlement" carried over from an older licensed install, or purchased separately).

Procedure: back up important files → reboot and enter CMOS (method varies by manufacturer, e.g. tapping ESC on HP) → enter the CMOS password if set → change boot priority to the install media → save and exit, letting the PC boot from that media → in Windows Setup, choose language/keyboard → if needed, format the drive to GPT or MBR and set partition size → proceed with install (budget over an hour on a conventional HDD).

// Check the physical layer first

Cabling accounts for roughly 70% of all network problems, so always verify Layer 1 (cable/Wi-Fi) before digging deeper. For a client to reach the network, four items must be correctly configured — the "big four": IP address, subnet mask, default gateway, and DNS server.

ToolWhat it does
ipconfigShows local config — IP, subnet mask, gateway, DNS (the "big four")
nslookupName server lookup — resolves a name to an IP or an IP to a name, checks the DNS cache
pingSends ICMP packets to test reachability; Windows sends 4 by default and reports results
tracertLike ping, but lists every hop along the path with transit time for each
netstatShows active connections — protocol, local/foreign address, and connection state
ACCAir Combat Command
AFIAir Force Instruction
AFNETAir Force Network
AFSPCAir Force Space Command
ALUArithmetic Logic Unit
APCOApproved Products Certification Office
ATAAdvanced Technology Attachment
ATXAdvanced Technology Extended
BIOSBasic Input/Output System
BSLMBase Software License Manager
BSODBlue Screen of Death
C-RIMMContinuity-RIMM
CD / CD-R / CD-RWCompact Disc / Recordable / Rewriteable
CHSCylinder-Head-Sector
CMOSComplementary Metal-Oxide Semiconductor
COTSCommercial Off-The-Shelf
CPUCentral Processing Unit
CSCybersecurity
CSTClient Systems Technician
DAFMANDepartment of the Air Force Manual
DISADefense Information Systems Agency
DDRDouble Data Rate
DIMMDual Inline Memory Module
DoDDepartment of Defense
DoDINDepartment of Defense Information Network
DRAMDynamic Random Access Memory
DRDRAMDirect Rambus Dynamic Random Access Memory
DVDDigital Video Disc
ECCError Correction Code
EDOExtended Data-out
EULAEnd-User License Agreement
EPROMErasable Programmable Read-Only Memory
ESAEnterprise Software Agreement
ESIEnterprise Software Initiative
eSATAExternal SATA
exFATExtended File Allocation Table
FATFile Allocation Table
FDCCFederal Desktop Core Configuration
FDDFloppy Disk Drive
FLDCOMField Command
FPMFast Page Mode
GOTSGovernment Off-The-Shelf
GPFGeneral Protection Fault
GPTGUID Partition Table
GPUGraphics Processing Unit
GUIGraphical User Interface
GUIDGlobally Unique Identifier
HAMRHeat Assisted Magnetic Recording
HCLHardware Compatibility List
HDDHard Disk Drive
HDMIHigh-Definition Multimedia Interface
HiDHuman Interface Device
I/OInput/Output
IAInformation Assurance
IE / MSIEInternet Explorer / Microsoft Internet Explorer
IOInteroperability
IRQInterrupt Request
ITInformation Technology
LANLocal Area Network
LBALogical Block Addressing
LGALand Grid Array
MACMedia Access Control
MAMRMicrowave Assisted Magnetic Recording
MBRMaster Boot Record
MPDRAMMultiport Dynamic Random Access Memory
MSCMass Storage Class
MSDOSMicrosoft Disk Operating System
NMINon-Maskable Interrupt
NICNetwork Interface Card
NIPRNETUnclassified but Sensitive Internet Protocol Router Network
NISTNational Institute of Standards and Technology
NTFSNew Technology File System
NVRAMNon-Volatile Random-Access Memory
OSOperating System
OSIOpen Systems Interconnection
PATAParallel ATA
PCPersonal Computer
PCMCIAPersonal Computer Memory Card International Association
PGAPin Grid Array
PnPPlug and Play
POSTPower-On Self-Test
PSUPower Supply Unit
PMRPerpendicular Magnetic Recording
RAMRandom Access Memory
RAMDACRAM Digital-to-Analog Converter
RDRAMRambus DRAM
RIMMRambus In-line Memory Module
ROMRead-Only Memory
RPMRevolutions Per Minute
SASSerial Attached SCSI
SATASerial ATA
SCSISmall Computer System Interface
SDSecure Digital
SDCStandard Desktop Configuration
SDRAMSynchronous Dynamic Random Access Memory
SIMMSingle Inline Memory Module
SMRShingled Magnetic Recording
SO-DIMMSmall Outline Dual In-line Memory Module
SRAMStatic Random Access Memory
SSDSolid State Drive
STIGSecurity Technical Implementation Guide
TPMTrusted Platform Module
UEFIUnified Extensible Firmware Interface
USBUniversal Serial Bus
USB PDUSB Power Delivery
USGCBUnited States Government Configuration Baseline
VRAMVideo Random Access Memory
ZIFZero Insertion Force