220-1202 Windows Administrative Tools — 15 Questions

Question 1

A user reports that their Windows 10 PC is running slowly after they installed a new program. You need to identify which service or startup program is consuming the most CPU resources to troubleshoot the issue. Which administrative tool should you use?

Accepted Answer

Task Manager. Task Manager provides real-time performance monitoring, including CPU usage per process. This makes it the ideal tool for quickly identifying resource hogs. Other tools like Event Viewer or Services.msc are for different purposes.

Answer

Event Viewer

Answer

Services.msc

Answer

Performance Monitor

Question 2

A security incident occurred where an unauthorized user gained access to a workstation. The security team needs to review detailed logs of all user logon attempts, including successful and failed logins, for the past 48 hours. Which administrative tool and specific log should you access to provide this information?

Accepted Answer

Event Viewer > Windows Logs > Security. Event Viewer's Windows Logs > Security log records all security-related events, including logon attempts (success and failure). This is the standard location for auditing user activity. Other logs like System or Application do not focus on authentication events.

Answer

Event Viewer > Windows Logs > System

Answer

Event Viewer > Applications and Services Logs > Microsoft > Windows > TerminalServices-LocalSessionManager

Answer

Computer Management > System Tools > Shared Folders > Sessions

Question 3

During a software deployment, you need to configure a Windows 10 workstation to automatically start a legacy application every time a specific user logs on. Which tool should you use to add this startup entry for that user only?

Accepted Answer

Task Manager. Task Manager's Startup tab allows you to manage per-user startup programs from a simple interface. For more control, you can also use the Startup folder or Registry, but Task Manager is the standard administrative tool for this task. Other tools like Services.msc or Group Policy are for system-wide or advanced configurations.

Answer

Services.msc

Answer

Computer Management

Answer

Local Group Policy Editor

Question 4

A customer reports that their Windows 11 PC is experiencing intermittent application crashes and you suspect file corruption. You need to run a system file check without using the full Windows interface. Which administrative tool can you launch from the Run dialog to open a command prompt with the necessary permissions?

Accepted Answer

Type 'cmd' in the Run dialog and press Ctrl+Shift+Enter. Running 'cmd' from the Run dialog opens a standard command prompt, but to run SFC with full access, you need to run it as Administrator. The correct approach is to type 'cmd' in the Run box and press Ctrl+Shift+Enter to launch as administrator, or use the Start menu. The question tests knowledge of how to access elevated command prompt. Other options like PowerShell or MSConfig are not the direct tool for this task.

Answer

Type 'cmd' in the Run dialog and press Enter

Answer

Type 'powershell' in the Run dialog and press Enter

Answer

Type 'msconfig' in the Run dialog and press Enter

Question 5

After installing a new printer, a user reports that print jobs are stuck in the queue and cannot be deleted. You need to stop and restart the print spooler service to clear the queue. Which administrative tool allows you to manage this service?

Accepted Answer

Services.msc. Services.msc (the Services console) is the tool for starting, stopping, and managing Windows services like the Print Spooler. It provides a graphical interface to control service status and startup type. Other tools like Task Manager or Event Viewer do not offer direct service management.

Answer

Task Manager

Answer

Device Manager

Answer

Event Viewer

Question 6

A user reports that their Windows 10 PC is unable to connect to shared network folders on the office server. You need to verify that the necessary network discovery and file sharing services are running. Which administrative tool should you open to check the status of services like 'Function Discovery Resource Publication' and 'SSDP Discovery'?

Accepted Answer

Services.msc. Services.msc provides a complete list of all Windows services, including those related to network discovery and sharing. You can check their status and start them if they are stopped. Other tools like Network and Sharing Center or Device Manager do not offer direct service management.

Answer

Network and Sharing Center

Answer

Device Manager

Answer

Task Manager

Question 7

A user reports that their Windows 10 PC fails to boot and displays a 'Boot Configuration Data is missing' error. You need to repair the boot configuration using the Windows Recovery Environment. Which administrative tool should you run from the command prompt in the recovery environment?

Accepted Answer

bootrec /rebuildbcd. Bootrec.exe is the command-line tool specifically designed to repair the Boot Configuration Data (BCD) and Master Boot Record (MBR). It is used from the Windows Recovery Environment command prompt. Other tools like SFC or DISM target system files or image health, not boot configuration.

Answer

sfc /scannow

Answer

DISM /Online /Cleanup-Image /RestoreHealth

Answer

chkdsk /f

Question 8

A customer complains that their Windows 11 laptop frequently freezes after waking from sleep. You suspect a driver issue and need to view detailed hardware and driver information to diagnose the problem. Which administrative tool should you open first?

Accepted Answer

Device Manager. Device Manager provides a centralized view of all hardware devices and their drivers, including driver status and version details. This makes it the go-to tool for driver-related troubleshooting. Other tools like Disk Management or System Configuration serve different purposes.

Answer

Disk Management

Answer

System Configuration (msconfig)

Answer

Event Viewer

Question 9

A user reports that their Windows 10 PC shows a 'Low Disk Space' warning on the C: drive. You need to free up space by removing temporary files, system cache, and previous Windows installations. Which tool provides a guided cleanup for these items?

Accepted Answer

Disk Cleanup. Disk Cleanup is the built-in tool designed to safely delete temporary files, system cache, and old Windows installations. It offers a simple interface to select categories of files to remove. Other tools like Storage Spaces or Defragment are for different disk management tasks.

Answer

Disk Management

Answer

Defragment and Optimize Drives

Answer

Storage Spaces

Question 10

A technician needs to deploy a custom security policy to all Windows 10 workstations in a small office. The policy must restrict access to the Control Panel and prevent users from changing system settings. Which administrative tool should be used to create and apply this policy locally on each machine?

Accepted Answer

Local Group Policy Editor (gpedit.msc). The Local Group Policy Editor (gpedit.msc) allows administrators to configure detailed security and restriction policies for users and computers. It is available on Windows Pro/Enterprise editions and is the correct tool for applying such restrictions locally. Other tools like Local Security Policy or User Accounts have limited scope.

Answer

Local Security Policy (secpol.msc)

Answer

User Accounts (netplwiz)

Answer

System Configuration (msconfig)

Question 11

A user's Windows 10 PC is experiencing random freezes and application crashes. You suspect a corrupted system file. You run sfc /scannow but it reports that it cannot repair some files. What is the next best step to repair the system files using a DISM command?

Accepted Answer

Run DISM /Online /Cleanup-Image /RestoreHealth. DISM (Deployment Imaging Service and Management Tool) can repair the system image that sfc relies on. Running DISM /Online /Cleanup-Image /RestoreHealth fixes corruption in the component store, allowing sfc to then repair system files.

Answer

Run chkdsk /f

Answer

Run System Restore

Answer

Run Windows Update

Question 12

Your company is deploying a new application that requires .NET Framework 3.5 on multiple Windows 10 workstations. You need to enable this feature on a single test machine first. Which tool should you use?

Accepted Answer

Windows Features. Windows Features (optionalfeatures.exe) allows you to turn on or off Windows components, including .NET Framework 3.5. This is the standard method for enabling such features without downloading full installers.

Answer

Programs and Features

Answer

Device Manager

Answer

Services

Question 13

A user reports that their Windows 10 PC frequently crashes with a blue screen error. You want to analyze the memory dump files to identify the faulty driver. Which tool should you use to view and analyze these dump files?

Accepted Answer

Event Viewer. Windows Memory Diagnostic (mdsched.exe) tests RAM for errors, but to analyze crash dump files, you use tools like WinDbg or the built-in Reliability Monitor. However, the question asks for a built-in tool to view dump files; the correct answer is Event Viewer, which logs crash events and can point to the dump file location.

Answer

Windows Memory Diagnostic

Answer

Performance Monitor

Answer

Task Manager

Question 14

A security incident occurred on a Windows 10 workstation, and you need to review detailed logs of user logon attempts, including successful and failed logins, to identify unauthorized access. Which tool should you use to view these security logs?

Accepted Answer

Event Viewer. Event Viewer contains Security logs that record logon events (success and failure) with timestamps and user account details. This is the primary tool for auditing user logon activity on Windows.

Answer

Reliability Monitor

Answer

Performance Monitor

Answer

Group Policy Editor

Question 15

Your company's security policy requires that all workstations have the latest Windows security updates installed. You need to verify the update history on a user's Windows 10 PC to ensure no critical updates are missing. Which tool should you use?

Accepted Answer

Windows Update. Windows Update settings (in Settings app or old Control Panel) shows update history, including installed updates and their dates. This is the standard way to check which updates have been applied.

Answer

Event Viewer

Answer

System Information

Answer

Reliability Monitor