mediumMultiple ChoiceObjective-mapped
220-1202 Practice Question: A customer reports that their Windows 10 desktop…
A customer reports that their Windows 10 desktop shows a black screen with a movable cursor after logging in. They can press Ctrl+Alt+Del and open Task Manager. Which process should be restarted from Task Manager to restore the desktop and taskbar?
⚠ Common exam trap
A common mix-up: candidates confuse the 'Windows Explorer' process with Internet Explorer or assume that 'svchost.exe' is the correct service host to restart, when in fact the shell process (explorer.exe) is the specific component responsible for the desktop and taskbar.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Restart the 'Windows Explorer' process in Task Manager.
The black screen with a movable cursor after login, combined with the ability to open Task Manager via Ctrl+Alt+Del, indicates that the Windows shell (explorer.exe) has crashed or is not running. Restarting the 'Windows Explorer' process from Task Manager (File > Run new task > 'explorer.exe') reloads the desktop, taskbar, and File Explorer, restoring the graphical user interface. This is the standard recovery step for a missing shell in Windows 10.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Restart the 'Windows Explorer' process in Task Manager.
Why this is correct
Restarting the 'Windows Explorer' (explorer.exe) process is the correct solution because this process is responsible for rendering the graphical user interface, including the desktop, taskbar, and file management windows. When the desktop appears black but the system is otherwise running, it often indicates that the explorer.exe shell has crashed or become unresponsive. Terminating and then restarting this specific process via Task Manager effectively reloads the entire desktop environment, typically resolving the visual display issue without requiring a full system reboot.
- ✗
End the 'svchost.exe' process group.
Why it's wrong here
Ending the 'svchost.exe' process group is an incorrect and potentially harmful action. Svchost.exe is a generic host process for services that run from dynamic-link libraries (DLLs), hosting numerous critical Windows services like networking, audio, and Plug and Play. Arbitrarily terminating an svchost.exe instance, especially a group, can lead to system instability, crashes, data loss, or the disabling of essential operating system functionalities, rather than fixing a desktop display issue.
- ✗
Start the 'winlogon.exe' process.
Why it's wrong here
Attempting to start the 'winlogon.exe' process is incorrect because winlogon.exe is a critical system process responsible for handling user logon and logoff, the Secure Attention Sequence (Ctrl+Alt+Del), and loading the user profile. This process is already running from system startup and is fundamental to user authentication, not the desktop shell itself. Manipulating or trying to restart winlogon.exe would likely cause a system crash or prevent proper user interaction, as it does not directly control the desktop's graphical rendering.
- ✗
Run 'msconfig' from the Run dialog to enable normal startup.
Why it's wrong here
Running 'msconfig' from the Run dialog to enable normal startup is an inappropriate solution for an immediate black screen issue. Msconfig, the System Configuration Utility, is used to modify boot options, startup programs, and services for *future* system boots, not to fix a currently crashed graphical shell. Furthermore, accessing the Run dialog (Win+R) or any other shell component is typically impossible when the desktop is black and explorer.exe is not functioning, rendering this option inaccessible and ineffective for the immediate problem.
Go deeper
Related to this question
About these practice questions
This 220-1202 question is part of Courseiva's 495-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 220-1202 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 220-1202 exam.