220-1202 Practice Test 12 — 15 Questions

Question 1

A customer reports that their Windows 11 PC is experiencing intermittent application crashes and you suspect file corruption. You need to run a system file check without using the full Windows interface. Which administrative tool can you launch from the Run dialog to open a command prompt with the necessary permissions?

Accepted Answer

Type 'cmd' in the Run dialog and press Ctrl+Shift+Enter. Running 'cmd' from the Run dialog opens a standard command prompt, but to run SFC with full access, you need to run it as Administrator. The correct approach is to type 'cmd' in the Run box and press Ctrl+Shift+Enter to launch as administrator, or use the Start menu. The question tests knowledge of how to access elevated command prompt. Other options like PowerShell or MSConfig are not the direct tool for this task.

Answer

Type 'cmd' in the Run dialog and press Enter

Answer

Type 'powershell' in the Run dialog and press Enter

Answer

Type 'msconfig' in the Run dialog and press Enter

Question 2

A user reports that their Windows 10 PC is unable to connect to shared network folders on the office server. You need to verify that the necessary network discovery and file sharing services are running. Which administrative tool should you open to check the status of services like 'Function Discovery Resource Publication' and 'SSDP Discovery'?

Accepted Answer

Services.msc. Services.msc provides a complete list of all Windows services, including those related to network discovery and sharing. You can check their status and start them if they are stopped. Other tools like Network and Sharing Center or Device Manager do not offer direct service management.

Answer

Network and Sharing Center

Answer

Device Manager

Answer

Task Manager

Question 3

A security incident occurred where an unauthorized user gained access to a workstation. The security team needs to review detailed logs of all user logon attempts, including successful and failed logins, for the past 48 hours. Which administrative tool and specific log should you access to provide this information?

Accepted Answer

Event Viewer > Windows Logs > Security. Event Viewer's Windows Logs > Security log records all security-related events, including logon attempts (success and failure). This is the standard location for auditing user activity. Other logs like System or Application do not focus on authentication events.

Answer

Event Viewer > Windows Logs > System

Answer

Event Viewer > Applications and Services Logs > Microsoft > Windows > TerminalServices-LocalSessionManager

Answer

Computer Management > System Tools > Shared Folders > Sessions

Question 4

A technician needs to deploy a custom security policy to all Windows 10 workstations in a small office. The policy must restrict access to the Control Panel and prevent users from changing system settings. Which administrative tool should be used to create and apply this policy locally on each machine?

Accepted Answer

Local Group Policy Editor (gpedit.msc). The Local Group Policy Editor (gpedit.msc) allows administrators to configure detailed security and restriction policies for users and computers. It is available on Windows Pro/Enterprise editions and is the correct tool for applying such restrictions locally. Other tools like Local Security Policy or User Accounts have limited scope.

Answer

Local Security Policy (secpol.msc)

Answer

User Accounts (netplwiz)

Answer

System Configuration (msconfig)

Question 5

A user reports that their Windows 10 PC is running slowly and they see many background processes in Task Manager. You need to identify which processes are consuming the most CPU and memory resources without installing any additional software. Which built-in Windows tool should you use?

Accepted Answer

Task Manager. Task Manager provides real-time monitoring of CPU, memory, disk, and network usage by process. It is the default tool for quickly identifying resource hogs on a Windows system.

Answer

Performance Monitor

Answer

Resource Monitor

Answer

System Configuration (msconfig)

Question 6

A customer complains that their Windows 10 PC fails to boot and displays a 'Bootmgr is missing' error. You suspect the Boot Configuration Data (BCD) is corrupted. Which tool should you use to repair the BCD from the Windows Recovery Environment?

Accepted Answer

bootrec /rebuildbcd. The bootrec tool is specifically designed to repair BCD and boot sector issues. Running bootrec /rebuildbcd scans for Windows installations and rebuilds the BCD store.

Answer

chkdsk /f

Answer

sfc /scannow

Answer

diskpart

Question 7

A small business owner wants to ensure that only authorized users can log into their Windows 10 workstations. They need a tool to create and manage user accounts and set password policies. Which administrative tool should you use?

Accepted Answer

Local Users and Groups. Local Users and Groups (lusrmgr.msc) is the snap-in for managing user accounts, groups, and local security policies on a standalone Windows system. It allows creating, modifying, and deleting users and setting password requirements.

Answer

Computer Management

Answer

Group Policy Editor

Answer

Task Scheduler

Question 8

Your company is deploying a new application that requires .NET Framework 3.5 on multiple Windows 10 workstations. You need to enable this feature on a single test machine first. Which tool should you use?

Accepted Answer

Windows Features. Windows Features (optionalfeatures.exe) allows you to turn on or off Windows components, including .NET Framework 3.5. This is the standard method for enabling such features without downloading full installers.

Answer

Programs and Features

Answer

Device Manager

Answer

Services

Question 9

A user reports that their Windows 10 PC frequently crashes with a blue screen error. You want to analyze the memory dump files to identify the faulty driver. Which tool should you use to view and analyze these dump files?

Accepted Answer

Event Viewer. Windows Memory Diagnostic (mdsched.exe) tests RAM for errors, but to analyze crash dump files, you use tools like WinDbg or the built-in Reliability Monitor. However, the question asks for a built-in tool to view dump files; the correct answer is Event Viewer, which logs crash events and can point to the dump file location.

Answer

Windows Memory Diagnostic

Answer

Performance Monitor

Answer

Task Manager

Question 10

A user is unable to install a new printer on their Windows 10 workstation because the 'Print Spooler' service is not running. You need to start the service and ensure it starts automatically on boot. Which tool should you use?

Accepted Answer

Services. The Services console (services.msc) allows you to view, start, stop, and configure the startup type of Windows services. To fix the Print Spooler, you would open Services, find the Print Spooler service, start it, and set its startup type to Automatic.

Answer

Device Manager

Answer

Task Scheduler

Answer

System Configuration

Question 11

Your company's security policy requires that all workstations have the latest Windows security updates installed. You need to verify the update history on a user's Windows 10 PC to ensure no critical updates are missing. Which tool should you use?

Accepted Answer

Windows Update. Windows Update settings (in Settings app or old Control Panel) shows update history, including installed updates and their dates. This is the standard way to check which updates have been applied.

Answer

Event Viewer

Answer

System Information

Answer

Reliability Monitor

Question 12

A user reports that their Windows 10 PC is infected with malware that keeps reinstalling after removal. You need to boot into a minimal environment to run antivirus scans without malware interference. Which advanced startup option should you use?

Accepted Answer

Safe Mode. Safe Mode loads only essential drivers and services, preventing most malware from running. This allows antivirus tools to clean infections more effectively. It is accessed via advanced startup options.

Answer

Enable Boot Logging

Answer

Last Known Good Configuration

Answer

Debugging Mode

Question 13

A user's Windows 10 PC is experiencing random freezes and application crashes. You suspect a corrupted system file. You run sfc /scannow but it reports that it cannot repair some files. What is the next best step to repair the system files using a DISM command?

Accepted Answer

Run DISM /Online /Cleanup-Image /RestoreHealth. DISM (Deployment Imaging Service and Management Tool) can repair the system image that sfc relies on. Running DISM /Online /Cleanup-Image /RestoreHealth fixes corruption in the component store, allowing sfc to then repair system files.

Answer

Run chkdsk /f

Answer

Run System Restore

Answer

Run Windows Update

Question 14

A security incident occurred on a Windows 10 workstation, and you need to review detailed logs of user logon attempts, including successful and failed logins, to identify unauthorized access. Which tool should you use to view these security logs?

Accepted Answer

Event Viewer. Event Viewer contains Security logs that record logon events (success and failure) with timestamps and user account details. This is the primary tool for auditing user logon activity on Windows.

Answer

Reliability Monitor

Answer

Performance Monitor

Answer

Group Policy Editor

Question 15

A user reports that after a recent Windows update, the 'Local Users and Groups' snap-in is missing from the Computer Management console. The user needs to add a new local user account. Which administrative tool should be used to complete this task?

Accepted Answer

Run lusrmgr.msc from the Run dialog.. The 'Local Users and Groups' snap-in (lusrmgr.msc) is the correct tool for managing local user accounts and groups. Even if it's missing from Computer Management, it can be run directly or added via the MMC. The other options are not designed for user account management.

Answer

Open the Services console (services.msc) and restart the 'User Manager' service.

Answer

Use the Disk Management tool to create a new user volume.

Answer

Open the Registry Editor and modify the SAM registry hive.