Free CheckPoint 156-587 R81.20 Actual Exam Questions - Question 4 Discussion
to achieve a required system level function?
D, system calls are triggered by user programs, so they start in User Mode before switching to Kernel Mode. The question says “initiated,” so it’s about where the call begins, not where it runs.
D, system calls are initiated from User Mode because that's where applications run and request services before switching to Kernel Mode for execution. The call starts outside the kernel.
Maybe A, since system calls need kernel privileges to run system functions safely.
Option A makes more sense here. System calls start in User Mode but to actually execute the system-level function, control switches to Kernel Mode. That's where the OS can safely handle the request. So the initiation of the system call itself is from User Mode, but the actual execution happens in Kernel Mode. Since the question asks where system calls are initiated to achieve the function, Kernel Mode is key because that's where the system-level operations run.
D (Isn't it from User Mode normally?)