Which statement best describes the distinction between kernel space and user space?

• A. Kernel space has privileged access to hardware and all memory; user space runs with restricted privileges; Separation protects the OS from errant or malicious user code and enforces security boundaries; context switches via system calls.
• B. User space has privileged access to hardware and all memory; kernel space runs with restricted privileges; Separation is mainly for organization.
• C. Both spaces have unrestricted privileges; separation is only for debugging.
• D. Kernel space executes in user mode while user space executes in supervisor mode.

Answer: (A)

The idea being tested is the privilege and isolation boundary between kernel space and user space. The kernel runs with full, privileged access to hardware and to the entire system memory. It operates in a protected mode that allows it to manage resources, handle interrupts, and execute trusted code. User-space processes, on the other hand, run with restricted privileges and are isolated from one another and from the kernel’s memory. This separation prevents a misbehaving or malicious program from directly touching hardware or the kernel’s data structures, which could crash the system or compromise security.

When user code needs services from the kernel, the CPU performs a controlled transition: a context switch into kernel mode where the kernel handles the request (for example, performing I/O, memory management, or scheduling) and then switches back to user mode to resume the program. This mechanism enforces well-defined interfaces and security boundaries, since all access to hardware and critical resources must go through the kernel.

Other statements either reverse the privileges (giving hardware access to user space) or claim both spaces have the same privileges, or incorrectly describe the mode in which each space runs. The described arrangement—kernel in privileged mode with direct hardware access and full memory control, user space in restricted mode with isolation and protected interfaces—best captures the distinction.