Software Troubleshooting Flashcards
While troubleshooting a malware infection, you use a USB to boot into a lightweight version of Windows. What environment did you MOST likely boot into?
WinPE
During the Runtime (RT) phase of the boot process, control is transferred to ntoskrnl.exe. What three functions does ntoskrnl.exe perform?
- Configures the OS environment
- Load device drivers
- Start services
What plays a critical role in the boot process, performing essential tasks such loading device drivers, initiating system services, and configuring the OS environment?
ntoskrnl.exe
Once the malware infection has been fully removed, you should re-enable System Restore and perform a full system backup. Where is the BEST location to store this backup?
On an external drive
Your Windows OS has been behaving unusually, and you discover that an automatic update occurred three days ago. What is the best step to take in resolving this issue?
Uninstall the update
What is a feature of a sheep dip computer?
Has port monitors and file monitors
Which two programs run during the startup process to enable user logon?
- Wininit
- Winlogon
After installing a new device, you encounter startup errors. What is the first step you should take to troubleshoot the problem?
Boot in Safe Mode and roll back the driver
System Restore is enabled for all volumes on a Windows system. Recently, a new network driver was installed, but it contained bugs that caused your network board to stop functioning, preventing internet access to download an earlier version of the driver. You need to revert the system to a restore point that was created before the driver installation. On the system Properties window, which option would you select to accomplish this?
System Restore
What must you utilize to boot from a hard drive?
Active partition
Primary partitions are subdivided into logical drives, true or false?
False
You are an IT technician for your company. Veronica, an employee, has reported receiving error messages about corrupt or missing Windows system files. To address this, you ran the Windows System File Checker tool (SFC.exe). After the files were repaired, Veronica contacted you again, indicating that the issue persists. You now suspect that malware may be causing the corruption or renaming of the system files. What is your FIRST step to take to remove any potential malware from the system?
Disconnect the computer from the network
While overseeing disk space for computers on your network, you’re interested in understanding how a new application might affect your available free space. Where can you locate the estimated size of this application?
In the app’s description in the Microsoft Store
What can an overheated hard drive cause?
System instability
After booting your Windows workstation in Safe Mode and enabling boot logging, which log file will contain the boot logging information?
Ntbtlog.txt
You’ve installed a new Ethernet network adapter in your Windows 11 desktop. After installation, the card is detected in Device Manager, but Windows cannot identify it. You download and install a driver you found online, but after rebooting, your system crashes immediately upon logging in. Rebooting again leads to the same outcome. What would be the BEST method to resolve this issue and allow Windows to load correctly?
Boot to Safe Mode and uninstall the network driver
After installing multiple devices to a computer, it fails to boot correctly. What is the BEST initial troubleshooting step to take?
Remove all of the newly added devices and install them one at a time
What keys let you switch between keyboard languages?
Globe key
You plan to upgrade your Windows 10 Professional computer to Windows 11 Professional. Upon checking the hardware, you find it has 2 GB of RAM, a 2.0 GHz dual-core processor, a 256 GB solid state drive, and a video adapter with 128 MB of RAM along with DirectX 12 support. You instend to install the 64-bit version of Windows 11. What steps should you take next?
Add more memory
A user requests assistance with a task that you’re unfamiliar with and that falls outside your job responsibilities. What is the MOST appropriate way to handle this request?
Explain to the user that this is not a task you can perform, but you will do your best to contact someone who can perform the task.
A technician suspects that an application on a tablet may be secretly accessing the camera without authorization. What is the BEST method to troubleshoot this issue?
Run an anti-malware scan
A security technician is performing a forensic analysis. What actions is MOST likely to compromise or destroy crucial evidence?
Shutting down the system
While working on your Windows 10 laptop during a severe thunderstorm, a lightning strike hits a nearby transformer, causing a power outage in your office. Since your laptop’s battery is dead, the computer shuts down abruptly. After power is restored, you turn your computer back on and see a missing DLL error message. What tool is most likely to resolve this issue?
sfc
The primary modifier key on Apple systems, used like the Ctrl key on a Windows system is?
command
Which stage of the legacy BIOS startup process loads the boot code from the Master Boot Record (MBR) and uses the partition table to locate the active disk partition?
Boot loader
You have a disk with three primary partitions and an extended partition containing two logical drives. You want to convert all partitions to simple volumes while preserving the data. Wat is the BEST action to take to achieve this?
Upgrade the disk to a dynamic disk
Which troubleshooting step do you try when troubleshooting application conflicts?
Check for application driver updates
What is the initial action you should take if an error arises during startup, causing your system repeatedly reboot?
Use the Disable automatic restart on a system failure option
An employee reports that their browser consistently opens to an unfamiliar search engine, and an unwanted toolbar has appeared. What malware-related issue is MOST likely responsible for this problem?
Software issues
You have been troubleshooting startup errors on your Windows 11 computer by rolling back recent changes, such as drivers for a local printer and a new graphics card while in Safe Mode. Despite your efforts, the issue persist, and the startup errors remain unresolved. What steps is MOST likely to help identify the root cause of the error without resorting to a full Windows reinstallation?
Disable and then enable devices and services one by one
What are two likely symptoms of a malware infection?
- Changed file permissions
- Renamed system files
After upgrading to the latest version of Windows, a critical application has stopped functioning. What is the BEST troubleshooting step to resolve this issue?
Enable Hyper-V to run the program on the previous version.
While working on a presentation editor on your Windows 11 laptop, the system freezes. After restarting, Windows 11 fails to boot. Which tool should you try FIRST to resolve the problem?
Startup Repair
What is the BEST step to try first when troubleshooting a Windows operating system problem?
Reboot the system
You’ve received a call from a customer who reports that after powering on her computer, she encounters the following error message:
Error loading operating system
BOOTMGR is missing
Press Ctrl+Alt+Delete to restart
She states that the same error persists with each restart.
What tool would be the most effective for resolving this issue?
bootrec
You are troubleshooting a Windows 11 computer that has halted and is displaying a black screen with an error message. What is the first step you should take to address the issue?
Search for the error in Microsoft’s knowledge base or by using an internet search engine
You’re using an older tool to manage a GPT-partitioned drive on a Windows 10 system, but only one partition is visible despite knowing the drive contains several partitions. What is the MOST likely reason you’re only seeing one partition?
The utility can only manage MBR partitions and is displaying the drive’s protected MBR.