220-1102 Windows Command-Line Tools — 10 Questions

Question 1

A user reports that a specific application crashes immediately on launch. You want to verify the integrity of the application's core files without reinstalling. Which command-line tool can you use to scan and repair system files that the application depends on?

Accepted Answer

sfc /scannow. The System File Checker (sfc /scannow) scans protected system files and replaces corrupted ones with cached copies. If the application relies on system files, sfc can fix the issue. DISM repairs the system image itself, chkdsk checks disk errors, and tasklist lists processes.

Answer

chkdsk /f

Answer

tasklist

Answer

dism /online /cleanup-image /restorehealth

Question 2

During a security incident, you need to identify which processes are listening on specific network ports on a Windows server. Which command-line tool should you use?

Accepted Answer

netstat -an. The netstat command with the -a (all connections) and -n (numerical addresses) options shows all listening ports and their associated processes. This is essential for security analysis. Other tools like nslookup resolve DNS, tracert trace routes, and ipconfig show IP configuration.

Answer

nslookup

Answer

tracert

Answer

ipconfig /all

Question 3

A security audit reveals that a Windows 10 workstation has an unauthorized local user account. You need to remove this account from the command line without using the GUI. Which command should you use?

Accepted Answer

net user UnauthorizedUser /delete. The net user command with the /delete switch removes a local user account. For example, 'net user UnauthorizedUser /delete' deletes the account. Other commands like net localgroup manage groups, wmic useraccount can also delete but net user is the standard CLI tool. gpresult shows group policy results.

Answer

net localgroup Administrators UnauthorizedUser /delete

Answer

wmic useraccount where name='UnauthorizedUser' delete

Answer

gpresult /r

Question 4

A customer complains that their Windows 10 laptop frequently loses network connectivity. You suspect the IP address configuration is incorrect. Which command should you use to release the current IP address and request a new one from the DHCP server?

Accepted Answer

ipconfig /release. The ipconfig /release command releases the current DHCP lease, and ipconfig /renew requests a new IP address from the DHCP server. This is the standard method to refresh IP configuration. Other commands like ping test connectivity, nslookup queries DNS, and netstat shows network connections.

Answer

ping 8.8.8.8

Answer

nslookup google.com

Answer

netstat -a

Question 5

A user reports that their Windows 10 PC is infected with malware that prevents the Task Manager from opening. You need to terminate a suspicious process from the command line. Which command should you use to forcefully end a process by its name?

Accepted Answer

taskkill /IM malware.exe /F. The taskkill command can terminate processes by name or PID. The /F flag forces termination, which is necessary for stubborn malware. Other commands like tasklist list processes, shutdown reboots the system, and regedit edits the registry.

Answer

tasklist /v

Answer

shutdown /r /t 0

Answer

regedit /e backup.reg

Question 6

After a failed Windows Update, a Windows 10 system repeatedly attempts to install the update and fails. You need to stop the Windows Update service and delete the temporary update files from the command line. Which two commands, in order, should you use? (Select the first command from the options.)

Accepted Answer

net stop wuauserv. First, you must stop the Windows Update service using net stop wuauserv. Then, delete the contents of the SoftwareDistribution folder (e.g., del /f /s /q C:\Windows\SoftwareDistribution\*). Other commands like sfc repair system files, dism repair the image, and taskkill terminate processes but are not the correct sequence.

Answer

sfc /scannow

Answer

dism /online /cleanup-image /restorehealth

Answer

taskkill /IM svchost.exe /F

Question 7

After installing a new application, a user's Windows 10 system fails to boot and displays a 'Bootmgr is missing' error. Which command-line tool should you use from the Windows Recovery Environment to repair the boot configuration?

Accepted Answer

bootrec. The bootrec tool is specifically designed to repair boot-related issues like a missing or corrupted Boot Manager. The /fixboot and /rebuildbcd options can resolve the 'Bootmgr is missing' error. Other tools like diskpart manage disks, sfc repairs system files, and chkdsk checks disk integrity.

Answer

diskpart

Answer

sfc /scannow

Answer

chkdsk /f

Question 8

A technician is troubleshooting a DNS resolution issue on a Windows 10 workstation. The user can ping an IP address but not a domain name. Which command should be used to clear the local DNS cache?

Accepted Answer

ipconfig /flushdns. The ipconfig /flushdns command clears the DNS resolver cache, which can resolve issues caused by stale or corrupted entries. Other commands like nslookup query DNS servers, netstat show connections, and ping test connectivity but do not clear the cache.

Answer

nslookup example.com

Answer

netstat -r

Answer

ping -a 192.168.1.1

Question 9

A user reports that their Windows 10 PC is running slowly and they suspect a background process is consuming excessive memory. Which command-line tool should you use to identify the process by name and memory usage?

Accepted Answer

tasklist. The tasklist command displays a list of running processes along with their PID, session name, and memory usage. This makes it the correct tool for identifying a memory-hungry process by name. Other options either do not show memory details or are used for different purposes like network configuration or disk management.

Answer

ipconfig

Answer

chkdsk

Answer

sfc

Question 10

A technician needs to deploy a custom script to 50 Windows 10 workstations during an automated software installation. The script must run with administrative privileges. Which command-line tool should be used to execute the script with elevated rights from a batch file?

Accepted Answer

runas /user:Administrator script.bat. The runas command allows executing a program with different credentials, typically an administrator account. In deployment scripts, runas /user:Administrator ensures the script runs with elevated privileges. Other options like msiexec install MSI packages, wmic queries WMI, and schtasks schedules tasks.

Answer

msiexec /i package.msi

Answer

wmic os get name

Answer

schtasks /create