Chapter 13 Flashcards
What occurs when you first turn on a system
When you first turn on a system, startup UEFI/BIOS on the motherboard takes control to examine hardware components and find an operating system to load.
Where does the UEFI store information, drivers and applications used for the startup
in the NVRAM and the EFI System Partition (ESP).
What manages windows startup
Windows startup is managed by the Windows Boot Manager.
What is the name of the executable windows boot manager for a UEFI system
bootmgfw.efi
What is the name of the executable windows boot manager for a BIOS system
bootmgr
What is the executable name for the windows boot loader
winload.exe or winload.efi
What does the boot configuration data store contain
The Boot Configuration Data (BCD) store contains Windows startup settings.
What is useful to have before any problems occur with the system
Backups of user data, Windows 8 custom refresh image or a windows 7 system image. It is also advised to create a windows 8 recovery drive and configure Windows 8 to use F8 at startup which launches advanced boot options
How can the windows recovery environment be started
The Windows Recovery Environment (Windows RE) can be started from within Windows, from the Windows setup DVD, or from a recovery drive. For Windows 7, press F8 at startup to launch Windows RE.
What are the tools for startup troubleshooting
Startup repair, memory diagnostics, system restore Safe mode Enabling boot logging, refresh, reset Applying a windows 7 system image
What are some commands that might be useful when repairing Windows
bootrec, bcdefit, diskpart, chkdsk, sfc
How can you possibly recover data from a hard drive that will not boot
You might be able to recover the data by installing the drive in another system as the second, non-booting hard drive in the system
How do you research stop errors on the error title and error numbers listed on the blue screen
Use the web to research
What are improper shutdowns most likely related to
Hardware related
Where might improper shutdown records be located
The event viewer might record the failures
What should be used to check the status the the memory and the hard drives
Use memory diagnostics and chkdsk
What should be considered as a possible cause for improper shutdown
Overheating should be considered an temperature should be monitored
What is the general recommended course of action when a device or service causes the system to hang during a normal boot
Boot into safe mode and then disable the device or service, then replace the drivers or service program file
What is bcdedit
A Windows command used to manually edit the BCD (Boot Configuration Data).
What is the blue screen of death (BSOD)
A Windows error that occurs in kernel mode, is displayed against a blue screen, and causes the system to halt. The error might be caused by problems with devices, device drivers, or a corrupted Windows installation. Also called blue screen error or stop error.
What is boot configuration data
A small Windows database structured the same as a registry file and contains configuration information about how Windows is started. The BCD file replaces the Boot.ini file used in Windows 2000/XP.
What is booting
The process of starting up a computer and loading an operating system.
What is bootrec
A Windows command used to repair the BCD (Boot Configuration Data) and boot sectors.
What is bootsect
A Windows command used to repair a dual-boot system.
What is chkdsk /r
A Windows command to check the hard drive for errors and repair the file system.
What is cold boot
HARD BOOT
What is diskpart
A Windows command to manage hard drives, partitions, and volumes.
What is EFI system partition
For a GPT hard drive, the bootable partition used to boot the OS and contains the boot manager program for the OS.
What is fast startup
A Windows 8 feature to speed up startup by performing a partial hibernation at shutdown.
At shutdown, Windows saves the drivers and kernel state in the Windows hibernate file, hiberfil.sys, and then reads from this file on the next cold boot.
What is format
The Windows command to prepare a hard drive volume, logical drive, or USB flash drive for use by placing tracks and sectors on its surface to store information (for example, format d:). This process erases all data on the device.
What is hard boot
Restart the computer by turning off the power or by pressing the Reset button. Also called a cold boot.
What is last known good configuration settings
In Windows 7/ Vista, registry settings and device drivers that were in effect when the computer last booted successfully. These settings are saved and can be restored during the startup process to recover from errors during the last boot. Windows 8 does not save the Last Known Good Configuration.
What is nonvolatile RAM
Flash memory on the motherboard that UEFI firmware uses to store device drivers and information about Secure Boot. Contents of NVRAM are not lost when the system is powered down.
What is POST
A self-diagnostic program used to perform a simple test of the CPU, RAM, and various I/O devices. The POST is performed by startup UEFI/BIOS when the computer is first turned on.
What is recovery drive
A Windows 8 bootable USB flash drive that can be used to recover the system when startup fails and can be created using the Recovery applet in Control Panel.
What is refresh
A Windows 8 technique to recover from
a corrupted Windows installation and can recover using a custom refresh image, a recovery partition, or the Windows setup DVD. Depending on the health of the system, user settings, data, and Windows 8 apps might be restored from backup near the end of the refresh operation.
What is reset
Restore a Window 8 installation to factory state or to the state after a clean install of Windows. The hard drive is formatted and all user data and settings are lost.
What is soft boot
To restart a computer without turning off the power, for example, in Windows 8, press Win+X, point to Shut down or sign out, and click Restart. Also called warm boot.
What is startup repair
A Windows utility that restores many of the Windows files needed for a successful boot.
What is system repair disc
A disc you can create using Windows 7 that can be used to launch Windows RE. The disc is not available in Windows 8.
What is windows boot loader
One of two programs that manage the loading of Windows 8/7/Vista. The program file (winload.exe or winload.efi) is stored in C:\ Windows\System32, and it loads and starts essential Windows processes.
what is windows recovery environment
A lean operating system installed on the Windows 8/7/Vista setup DVD and also on the Windows 8/7 volume that can be used to troubleshoot problems when Windows refuses to start.
What test does startup UEFI/BIOS perform when you first turn on a computer to verify it can communicate with essential hardware devices?
POST test
Where is the MBR partition table on a hard drive found?
First sector of the hard drive
Is the bootmgr file stored in the boot partition or the system partition?
System partition
What is the name of the Boot Manager program in a UEFI system? On which partition is the program stored?
bootmgfw.efi
What is the name of the Windows boot loader program for a BIOS system? For a UEFI system?
(BIOS) winresume.exe
(UEFI) winresume.efi
What is the name of the Windows kernel program?
ntoskrnl.exe (Windows 7)
What is the name of the program that manages Windows logon?
winlogon.exe
Which registry hive is loaded first during Windows startup?
System Registry Hive
Where does Windows store device driver files?
In C:\Windows\System32 or C:\Windows\System32\Drivers
Stop errors happen when which type of processes encounter an error?
When processes running in kernel mode encounter an error
What is the command to use the System File Checker to immediately verify system files?
sfc/ scannow
In Windows 7, which key do you press to launch the Advanced Boot Options window during Windows startup?
f8
A stop error halts the system while it is booting, and the booting starts over in an endless loop of restarts. How can you solve this problem using the Windows 8 Startup Settings screen?
F8, select Disable Automatic restart on system failure
When is the Windows startup process completed?
Windows startup is officially completed when the windows desktop appears and the wait circle disappears.
What command in Windows RE can you use to rebuild the BCD file?
Bootrec /rebuildBCD
What command in Windows RE gives you opportunity to manage partitions and volumes installed on the system?
diskpart
Which log in Event Viewer only tracks errors and warnings?
Administrative events log
If you are having a problem with a driver, which of the following is the least invasive solution: update
the driver or use System Restore?
Update the driver
What is the name of the log file and its location that is created when you enabled boot logging on the Windows 8 Startup Setting menu or the Windows 7 Advanced Boot Options menu?
Location: C:\Windows\ Ntbtlog.txt Final Name: Ntbtlog.txt
What information is contained in the C:\Windows\System32\LogFiles\SRT\SRTTrail.txt file?
Spontaneous shut downs and restarts; Startup settings and startup repair tool
When the Windows registry is corrupted and you cannot boot from the hard drive, what tool or method is the best option to fix the problem?
use commands from the Windows Recovery Environment to recover the registry from backup
Your Windows system boots to a blue screen stop error and no Start screen or desktop. What do you do first?
attempt to boot into the Advanced Boot Options menu
You have important data on your hard drive that is not backed up and your Windows installation is so corrupted you know that you must refresh the entire installation. What do you do first?
make every attempt to recover the data
Your computer displays the error message “A disk read error occurred.” You try to boot from the Windows setup DVD and you get the same error. What is most likely the problem?
boot device order is set to boot from the hard drive before the optical drive
When a driver is giving problems in Windows 8, which tool offers the least intrusive solution?
device manager
An error message is displayed during Windows startup about a service that has failed to start and then the system locks up. You try to boot into Safe Mode, but get the same error message. What do you try next?
boot to windows RE and perform a startup repair
