220-1102 Windows OS Features and Tools — 20 Questions

Question 1

A user is unable to print to a network printer after a Windows update. Other users on the same network can print successfully. Which Windows tool should you use to view detailed error messages related to the print spooler service?

Accepted Answer

Event Viewer. Event Viewer (C) is the correct tool because it logs detailed error messages from the print spooler service (spoolsv.exe) under 'Windows Logs > System' or 'Applications and Services Logs > Microsoft > Windows > PrintService'. When a Windows update breaks printing for a single user, Event Viewer captures spooler errors such as access denied, driver conflicts, or RPC failures that are not shown in other tools.

Answer

Device Manager

Answer

Services.msc

Answer

Performance Monitor

Question 2

A user's Windows 10 PC is infected with ransomware that has encrypted their Documents folder. You need to restore the files from a previous version that was saved by File History. Where do you access the 'Previous Versions' feature to restore these files?

Accepted Answer

File Explorer > Properties > Previous Versions tab. The 'Previous Versions' tab is accessible via File Explorer by right-clicking a file or folder, selecting Properties, and then clicking the Previous Versions tab. This tab lists shadow copies or File History backups of the selected item, allowing you to restore an earlier version. In this scenario, since File History was enabled, the previous versions of the Documents folder will appear here for restoration.

Answer

Control Panel > File History > Restore personal files

Answer

Settings > Update & Security > Backup

Answer

Computer Management > Storage > Disk Management

Question 3

You are configuring a new Windows 10 workstation for a remote employee who will connect to the corporate VPN. The user should not be able to install software or change system settings. Which tool should you use to enforce these restrictions?

Accepted Answer

Local Group Policy Editor. Local Group Policy Editor (gpedit.msc) allows you to configure security and restriction policies on a standalone computer. You can disable the ability to install software by setting the 'Disable Windows Installer' policy and restrict access to Control Panel settings. This is the appropriate tool for a non-domain joined machine.

Answer

User Account Control (UAC) settings

Answer

Device Manager

Answer

Registry Editor

Question 4

A technician needs to create a bootable USB drive that can run Windows PE to deploy a custom Windows 10 image to multiple laptops. Which Windows tool should they use to create this bootable media?

Accepted Answer

Windows ADK (Assessment and Deployment Kit). The Windows Assessment and Deployment Kit (Windows ADK) includes the Deployment Tools, which contain the necessary utilities (such as `copype.cmd` and `MakeWinPEMedia`) to create a bootable Windows PE USB drive. This is the correct tool for building custom WinPE media to deploy a Windows 10 image to multiple laptops, as it provides the full environment for customizing and generating the bootable image.

Answer

Windows Media Creation Tool

Answer

Windows System Image Manager (Windows SIM)

Answer

Disk Management

Question 5

You are troubleshooting a Windows 10 PC that fails to boot with the error 'Boot Configuration Data is missing.' Which built-in tool can you use from the Windows Recovery Environment to rebuild the BCD store?

Accepted Answer

Bootrec.exe. Bootrec.exe is the correct built-in tool for rebuilding the Boot Configuration Data (BCD) store from the Windows Recovery Environment (WinRE). The specific command 'bootrec /rebuildbcd' scans all disks for Windows installations and allows you to rebuild the BCD store, directly addressing the 'Boot Configuration Data is missing' error. Other tools like SFC, Diskpart, and CHKDSK do not have the capability to reconstruct the BCD store.

Answer

System File Checker (sfc /scannow)

Answer

Diskpart

Answer

CHKDSK

Question 6

After installing a new application, a user reports that their default web browser keeps changing to a different one without their consent. Which Windows feature can you use to prevent applications from changing file associations and default programs?

Accepted Answer

Local Group Policy Editor. The Local Group Policy Editor (gpedit.msc) allows administrators to configure the 'Set a default associations configuration file' policy under Computer Configuration > Administrative Templates > Windows Components > File Explorer. When enabled, this policy prevents applications from changing file associations and default programs by locking the association file, overriding any user or application changes. This is the correct tool for enforcing system-wide control over default programs in Windows 10/11 Pro, Enterprise, or Education editions.

Answer

Programs and Features

Answer

Default Programs (Control Panel)

Answer

Registry Editor

Question 7

During a software deployment, you need to ensure that a legacy application always runs with administrative privileges, even for standard users. How can you configure this using Windows built-in tools?

Accepted Answer

Set the application's shortcut to 'Run as administrator' in the Compatibility tab. Option A is correct because the Compatibility tab in a shortcut's properties allows you to set the 'Run as administrator' flag, which embeds a compatibility manifest that prompts for elevation via UAC when the application is launched. This ensures the legacy application always runs with administrative privileges, even for standard users, by triggering a credential prompt for an administrator account.

Answer

Disable User Account Control (UAC) in the Control Panel

Answer

Add the user to the local Administrators group

Answer

Use the 'Run as different user' option from the Shift+right-click menu

Question 8

A customer needs to transfer their user profile, documents, and application settings from an old Windows 7 PC to a new Windows 10 PC. Which Windows tool is specifically designed for this purpose?

Accepted Answer

User State Migration Tool (USMT). The User State Migration Tool (USMT) is a command-line tool designed for large-scale migrations of user profiles and settings. It is included in the Windows Assessment and Deployment Kit (ADK). For simpler transfers, Windows Easy Transfer was used in older versions, but USMT is the enterprise-grade solution.

Answer

Windows Easy Transfer

Answer

File History

Answer

Windows Backup and Restore

Question 9

A user reports that their Windows 10 laptop is running slowly and frequently shows a 'Low Memory' warning. They have 8 GB of RAM and are not running any unusual applications. Which built-in Windows tool should you use to determine if a specific process is leaking memory?

Accepted Answer

Task Manager. Task Manager (Option B) is the correct tool because it provides a real-time view of per-process memory usage, including the 'Memory (Active Private Working Set)' column, which can identify a process that is consuming an abnormally increasing amount of RAM over time—indicative of a memory leak. Unlike other tools, Task Manager allows you to quickly sort processes by memory usage and observe growth without needing to configure counters or parse logs.

Answer

Performance Monitor

Answer

Event Viewer

Answer

System Configuration (msconfig)

Question 10

A company is migrating from Windows 7 to Windows 10 and needs to automate the installation of 200 workstations with identical software and settings. They have a reference computer already configured. Which Windows tool should they use to capture and deploy a custom system image?

Accepted Answer

System Preparation Tool (Sysprep). Sysprep is the correct tool because it generalizes a Windows installation by removing unique system identifiers (such as the computer SID, computer name, and driver caches) so that the reference computer’s image can be safely captured and deployed to multiple workstations. After Sysprep runs with the /generalize option, the image is captured using a tool like DISM or ImageX, then deployed to 200 identical workstations, ensuring each machine generates its own unique SID and settings on first boot.

Answer

Windows System Image Manager (Windows SIM)

Answer

Windows Recovery Environment (WinRE)

Answer

Windows Backup and Restore

Question 11

A security incident occurred on a Windows 10 workstation where an attacker gained administrative access and created several hidden user accounts. You need to ensure no unauthorized accounts exist and that the built-in Administrator account is disabled. Which two tools can you use from the command line to list all user accounts and check the status of the Administrator account?

Accepted Answer

Use 'net user' to list accounts and 'net user Administrator | findstr /i active' to check status.. The 'net user' command lists all local user accounts on a Windows system, which is necessary to identify hidden or unauthorized accounts. Piping 'net user Administrator' through 'findstr /i active' filters the output to show whether the built-in Administrator account is enabled or disabled, as the status line contains 'Active' or 'Account active' depending on the locale. This combination directly fulfills the requirement to list all accounts and check the Administrator account's status from the command line.

Answer

Use 'whoami' to list current user and 'net localgroup Administrators' to see group members.

Answer

Use 'dir C:\Users' to list user profile folders and 'net accounts' to see password policies.

Answer

Use 'gpresult /R' to list applied policies and 'net start' to see running services.

Question 12

A customer calls saying that after installing a new application, their Windows 11 desktop icons are scattered and the taskbar keeps disappearing. They need a quick way to restore the default desktop layout and taskbar behavior without affecting personal files. Which built-in tool should you guide them to use?

Accepted Answer

System Restore from the System Protection tab.. The System Restore tool rolls back system files and registry settings to a previous restore point, which can undo changes made by the problematic application. It does not affect personal files. The other options either don't target system changes or are too drastic.

Answer

Reset this PC with the 'Keep my files' option.

Answer

Refresh the desktop by right-clicking and selecting 'Refresh'.

Answer

Use the Deployment Imaging Service and Management Tool (DISM) to repair the system image.

Question 13

A Windows 10 workstation is experiencing random blue screen errors with the stop code 'IRQL_NOT_LESS_OR_EQUAL'. You suspect a faulty driver. You need to analyze the memory dump files to identify the offending driver. Which built-in tool should you use to view the dump file?

Accepted Answer

Windows Debugging Tools (WinDbg) – open the .dmp file.. WinDbg (Windows Debugging Tools) is the correct built-in tool for analyzing memory dump (.dmp) files. It can parse crash dump data and identify the specific driver or module that caused the IRQL_NOT_LESS_OR_EQUAL stop code by examining the stack trace and loaded module list. This is the standard approach for post-mortem debugging of blue screen errors.

Answer

Event Viewer (eventvwr.msc) – filter by System logs with level 'Error'.

Answer

Performance Monitor (perfmon.msc) – add a Data Collector Set for crash dumps.

Answer

Windows Memory Diagnostic (mdsched.exe) – run a memory test.

Question 14

A small business has a shared Windows 10 workstation that multiple employees use. They want to ensure that each user's desktop settings, files, and application data are completely isolated and that users cannot access each other's data. Which feature should you configure to achieve this?

Accepted Answer

Create standard local user accounts and set NTFS permissions on each user's profile folder.. Standard local user accounts with NTFS permissions provide isolation by default; each user has their own profile folder with restricted permissions. The other options either don't enforce isolation (guest account) or are for different purposes (domain, BitLocker).

Answer

Enable the built-in Guest account for all users.

Answer

Join the computer to a domain and use roaming profiles.

Answer

Enable BitLocker on the system drive.

Question 15

A user on a Windows 10 Pro workstation complains that they cannot change their desktop background or theme, and several personalization settings are grayed out. The computer is not joined to a domain. Which Group Policy or local policy setting is most likely causing this restriction?

Accepted Answer

The 'Prevent changing desktop background' policy.. The Local Group Policy Editor (gpedit.msc) can enforce user restrictions. The specific policy 'Prevent changing desktop background' under User Configuration > Administrative Templates > Control Panel > Personalization would cause this symptom. The other options are either not specific to personalization or affect different settings.

Answer

The 'Remove and prevent access to the Shut Down, Restart, Sleep, and Hibernate commands' policy.

Answer

The 'Prohibit access to Control Panel and PC settings' policy.

Answer

The 'Turn off all Windows Spotlight features' policy.

Question 16

A technician is troubleshooting a Windows 11 computer that fails to boot with a 'Bootmgr is missing' error. They have a Windows installation USB. Which tool from the Windows Recovery Environment should they use to repair the boot configuration data (BCD)?

Accepted Answer

Bootrec (bootrec /rebuildbcd). The 'Bootmgr is missing' error indicates that the Boot Configuration Data (BCD) store is corrupted or missing. The `bootrec /rebuildbcd` command scans all disks for Windows installations and rebuilds the BCD store from scratch, directly addressing the missing or corrupted boot configuration. This is the correct tool in the Windows Recovery Environment for repairing BCD issues.

Answer

System File Checker (sfc /scannow)

Answer

DISM (DISM /Online /Cleanup-Image /RestoreHealth)

Answer

Diskpart (diskpart /s script.txt)

Question 17

A user reports that their Windows 10 laptop is running very slowly after a recent software installation. You suspect a driver conflict. You need to boot the system with a minimal set of drivers and services to troubleshoot, but you must not use Safe Mode because the user needs network access for remote support. Which boot configuration should you set using the System Configuration tool?

Accepted Answer

Under the General tab, select 'Diagnostic startup'.. The System Configuration (msconfig) tool allows you to enable 'Selective startup' and load only essential services and startup items, while still allowing network drivers to load. Safe Mode with Networking would also work but is not a msconfig setting; the question specifies using msconfig.

Answer

Set the boot to 'Safe boot' with 'Network' selected under Boot options.

Answer

Under the General tab, select 'Selective startup' and uncheck 'Load system services'.

Answer

Under the Boot tab, check 'No GUI boot' and set the timeout to 0.

Question 18

A user reports that after a recent Windows update, their laptop takes significantly longer to boot and they see a message about 'Preparing Automatic Repair' before the login screen appears. You need to access the advanced startup options to disable automatic restart on system failure. Which tool or feature should you use to boot into the Windows Recovery Environment (WinRE) from a running system?

Accepted Answer

Hold the Shift key while clicking Restart from the Start menu power options.. Option C is correct because holding the Shift key while clicking Restart forces the system to boot directly into the Windows Recovery Environment (WinRE) without needing installation media. This method leverages the built-in boot configuration data (BCD) to load the recovery tools, including the option to disable automatic restart on system failure under advanced startup settings.

Answer

Boot from a Windows installation USB and select 'Repair your computer'.

Answer

Press F8 repeatedly during boot to access advanced boot options.

Answer

Open the System Configuration tool (msconfig) and set the boot to 'Safe Mode' under the Boot tab.

Question 19

During a routine security audit, you discover that several user accounts on a Windows 10 workstation have local administrator privileges when they should only be standard users. You need to quickly review and modify user account types from the command line. Which built-in tool should you use?

Accepted Answer

net localgroup. The 'net localgroup' command allows you to view and modify local group memberships, such as adding or removing users from the Administrators group. The other options are either for different purposes (like disk management) or require a GUI.

Answer

lusrmgr.msc (Local Users and Groups MMC)

Answer

net user

Answer

diskpart

Question 20

A company is migrating from Windows 10 to Windows 11 on several workstations. You need to verify that each computer meets the minimum hardware requirements, including TPM 2.0 and Secure Boot capability, before deploying the upgrade. Which built-in tool should you run on each machine to generate a compatibility report?

Accepted Answer

Windows 11 PC Health Check app (downloaded from Microsoft).. The Windows 11 PC Health Check app is the official Microsoft tool designed specifically to verify compatibility with Windows 11, including TPM 2.0 and Secure Boot capability. It generates a detailed compatibility report, making it the correct built-in tool for this pre-upgrade validation task.

Answer

System Information (msinfo32.exe) and manually check the System Summary for TPM and Secure Boot status.

Answer

Deployment Imaging and Servicing Management (DISM) with the /Get-CurrentEdition option.

Answer

System Restore (rstrui.exe) to revert to a previous state if the upgrade fails.