CCNA Windows Administrative Tools Questions

30 questions · Windows Administrative Tools · All types, answers revealed

1
MCQmedium

A small business user needs to set up a VPN connection on their Windows 11 laptop to access company resources. They ask you which tool to use. Which administrative tool should you instruct them to open?

A.Device Manager to install a virtual network adapter.
B.Windows Settings > Network & internet > VPN.
C.Services console to enable the 'Remote Access Connection Manager' service.
D.Task Scheduler to create a task that launches the VPN client.
AnswerB

Correct. The VPN section in Windows Settings allows adding and configuring VPN connections.

Why this answer

The Settings app (or Control Panel > Network and Sharing Center) is the correct place to configure VPN connections in Windows 11. The other tools are not used for VPN setup.

2
MCQmedium

After a malware infection, a user's Windows 10 PC has several suspicious scheduled tasks that run at startup. Which administrative tool should you use to review and disable these tasks?

A.Services console to stop the 'Task Scheduler' service.
B.Task Scheduler to examine the task library and disable suspicious entries.
C.Resource Monitor to see which tasks are currently running.
D.Windows Firewall with Advanced Security to block the tasks' network access.
AnswerB

Correct. Task Scheduler provides a full list of scheduled tasks, including those created by malware, and allows disabling or deleting them.

Why this answer

Task Scheduler (taskschd.msc) is the tool for viewing, creating, and disabling scheduled tasks. Malware often uses scheduled tasks for persistence. The other tools do not manage scheduled tasks.

3
MCQeasy

A user reports that their Windows 10 PC is running slowly after they installed a new program. You need to identify which service or startup program is consuming the most CPU resources to troubleshoot the issue. Which administrative tool should you use?

A.Event Viewer
B.Task Manager
C.Services.msc
D.Performance Monitor
AnswerB

Task Manager's Processes tab shows CPU, memory, and disk usage for each running process, allowing you to pinpoint the culprit.

Why this answer

Task Manager provides real-time performance monitoring, including CPU usage per process. This makes it the ideal tool for quickly identifying resource hogs. Other tools like Event Viewer or Services.msc are for different purposes.

4
MCQhard

A user's Windows 10 PC is experiencing random freezes and application crashes. You suspect a corrupted system file. You run sfc /scannow but it reports that it cannot repair some files. What is the next best step to repair the system files using a DISM command?

A.Run chkdsk /f
B.Run DISM /Online /Cleanup-Image /RestoreHealth
C.Run System Restore
D.Run Windows Update
AnswerB

DISM /RestoreHealth repairs the system image, enabling sfc to function correctly afterward.

Why this answer

DISM (Deployment Imaging Service and Management Tool) can repair the system image that sfc relies on. Running DISM /Online /Cleanup-Image /RestoreHealth fixes corruption in the component store, allowing sfc to then repair system files.

5
MCQhard

A security incident occurred where an unauthorized user gained access to a workstation. The security team needs to review detailed logs of all user logon attempts, including successful and failed logins, for the past 48 hours. Which administrative tool and specific log should you access to provide this information?

A.Event Viewer > Windows Logs > System
B.Event Viewer > Windows Logs > Security
C.Event Viewer > Applications and Services Logs > Microsoft > Windows > TerminalServices-LocalSessionManager
D.Computer Management > System Tools > Shared Folders > Sessions
AnswerB

The Security log contains audit events such as logon/logoff, account management, and policy changes.

Why this answer

Event Viewer's Windows Logs > Security log records all security-related events, including logon attempts (success and failure). This is the standard location for auditing user activity. Other logs like System or Application do not focus on authentication events.

6
MCQeasy

During a software deployment, you need to configure a Windows 10 workstation to automatically start a legacy application every time a specific user logs on. Which tool should you use to add this startup entry for that user only?

A.Services.msc
B.Task Manager
C.Computer Management
D.Local Group Policy Editor
AnswerB

Task Manager's Startup tab lists user startup items and allows you to enable or disable them easily.

Why this answer

Task Manager's Startup tab allows you to manage per-user startup programs from a simple interface. For more control, you can also use the Startup folder or Registry, but Task Manager is the standard administrative tool for this task. Other tools like Services.msc or Group Policy are for system-wide or advanced configurations.

7
MCQmedium

A customer reports that their Windows 11 PC is experiencing intermittent application crashes and you suspect file corruption. You need to run a system file check without using the full Windows interface. Which administrative tool can you launch from the Run dialog to open a command prompt with the necessary permissions?

A.Type 'cmd' in the Run dialog and press Enter
B.Type 'powershell' in the Run dialog and press Enter
C.Type 'cmd' in the Run dialog and press Ctrl+Shift+Enter
D.Type 'msconfig' in the Run dialog and press Enter
AnswerC

This launches an elevated command prompt with administrator privileges, required for SFC to repair system files.

Why this answer

Running 'cmd' from the Run dialog opens a standard command prompt, but to run SFC with full access, you need to run it as Administrator. The correct approach is to type 'cmd' in the Run box and press Ctrl+Shift+Enter to launch as administrator, or use the Start menu. The question tests knowledge of how to access elevated command prompt.

Other options like PowerShell or MSConfig are not the direct tool for this task.

8
MCQmedium

Your company is deploying a new application that requires .NET Framework 3.5 on multiple Windows 10 workstations. You need to enable this feature on a single test machine first. Which tool should you use?

A.Programs and Features
B.Windows Features
C.Device Manager
D.Services
AnswerB

Windows Features lets you add or remove Windows components like .NET Framework 3.5 directly from the operating system.

Why this answer

Windows Features (optionalfeatures.exe) allows you to turn on or off Windows components, including .NET Framework 3.5. This is the standard method for enabling such features without downloading full installers.

9
MCQmedium

After installing a new printer, a user reports that print jobs are stuck in the queue and cannot be deleted. You need to stop and restart the print spooler service to clear the queue. Which administrative tool allows you to manage this service?

A.Task Manager
B.Services.msc
C.Device Manager
D.Event Viewer
AnswerB

Services.msc lists all services, including the Print Spooler, and allows you to stop, start, or restart them.

Why this answer

Services.msc (the Services console) is the tool for starting, stopping, and managing Windows services like the Print Spooler. It provides a graphical interface to control service status and startup type. Other tools like Task Manager or Event Viewer do not offer direct service management.

10
MCQmedium

A user reports that their Windows 10 PC frequently crashes with a blue screen error. You want to analyze the memory dump files to identify the faulty driver. Which tool should you use to view and analyze these dump files?

A.Event Viewer
B.Windows Memory Diagnostic
C.Performance Monitor
D.Task Manager
AnswerA

Event Viewer logs system errors, including blue screen events, and provides details about the crash, including the dump file path.

Why this answer

Windows Memory Diagnostic (mdsched.exe) tests RAM for errors, but to analyze crash dump files, you use tools like WinDbg or the built-in Reliability Monitor. However, the question asks for a built-in tool to view dump files; the correct answer is Event Viewer, which logs crash events and can point to the dump file location.

11
MCQhard

A user reports that their Windows 10 PC is unable to connect to network shares on a server, but internet access works fine. You suspect the 'Workstation' service is not running. Which administrative tool should you use to verify and start this service?

A.Task Manager > Startup tab to check if the service is enabled.
B.Network and Sharing Center to run the network troubleshooter.
C.Services console to locate the 'Workstation' service and start it.
D.Device Manager to reinstall the network adapter driver.
AnswerC

Correct. The Services console lists all services, including the Workstation service, and allows starting, stopping, or restarting them.

Why this answer

The Services console (services.msc) is the correct tool to view and manage the status of the Workstation service (LanmanWorkstation), which is required for SMB connections to network shares. The other tools are not designed for service management.

12
MCQmedium

A user reports that their Windows 10 PC is unable to connect to shared network folders on the office server. You need to verify that the necessary network discovery and file sharing services are running. Which administrative tool should you open to check the status of services like 'Function Discovery Resource Publication' and 'SSDP Discovery'?

A.Network and Sharing Center
B.Device Manager
C.Services.msc
D.Task Manager
AnswerC

Services.msc allows you to view and manage the status of all Windows services, including network discovery services.

Why this answer

Services.msc provides a complete list of all Windows services, including those related to network discovery and sharing. You can check their status and start them if they are stopped. Other tools like Network and Sharing Center or Device Manager do not offer direct service management.

13
MCQhard

A security incident occurred on a Windows 10 workstation, and you need to review detailed logs of user logon attempts, including successful and failed logins, to identify unauthorized access. Which tool should you use to view these security logs?

A.Reliability Monitor
B.Performance Monitor
C.Event Viewer
D.Group Policy Editor
AnswerC

Event Viewer's Security log records all logon events, providing the necessary audit trail.

Why this answer

Event Viewer contains Security logs that record logon events (success and failure) with timestamps and user account details. This is the primary tool for auditing user logon activity on Windows.

14
MCQeasy

A customer complains that their Windows 10 PC is running very slowly after a recent software installation. You suspect a new background service is consuming excessive CPU. Which built-in administrative tool should you use to identify the offending service?

A.Device Manager to check for driver issues.
B.Services console (services.msc) to locate and stop the problematic service.
C.Event Viewer to review system logs.
D.Performance Monitor to create a data collector set.
AnswerB

Correct. The Services console provides a comprehensive list of services and their status, allowing you to stop or disable the offending service.

Why this answer

The Services console (services.msc) allows you to view and manage all Windows services, including stopping, starting, and disabling them. Task Manager shows running processes but provides less detail for service management. The other tools are not designed for service control.

15
MCQmedium

Your company's security policy requires that all workstations have the latest Windows security updates installed. You need to verify the update history on a user's Windows 10 PC to ensure no critical updates are missing. Which tool should you use?

A.Windows Update
B.Event Viewer
C.System Information
D.Reliability Monitor
AnswerA

Windows Update provides a history of installed updates and allows you to check for missing updates.

Why this answer

Windows Update settings (in Settings app or old Control Panel) shows update history, including installed updates and their dates. This is the standard way to check which updates have been applied.

16
MCQmedium

A technician is troubleshooting a Windows 10 PC that fails to boot with a 'Bootmgr is missing' error. They need to repair the boot configuration. Which administrative tool should be used from the Windows Recovery Environment (WinRE)?

A.System Restore to revert to a previous restore point.
B.Command Prompt to run bootrec /rebuildbcd.
C.Device Manager to update the disk driver.
D.Local Security Policy to adjust boot options.
AnswerB

Correct. The bootrec command can rebuild the Boot Configuration Data (BCD) and fix the missing bootmgr error.

Why this answer

The Command Prompt in WinRE allows running bootrec.exe and bcdedit.exe to repair the boot configuration. System Restore and Startup Repair are also in WinRE but do not directly rebuild the BCD. The other options are not available in WinRE.

17
MCQmedium

A user reports that their Windows 10 PC fails to boot and displays a 'Boot Configuration Data is missing' error. You need to repair the boot configuration using the Windows Recovery Environment. Which administrative tool should you run from the command prompt in the recovery environment?

A.sfc /scannow
B.bootrec /rebuildbcd
C.DISM /Online /Cleanup-Image /RestoreHealth
D.chkdsk /f
AnswerB

Bootrec with the /rebuildbcd switch scans for Windows installations and rebuilds the BCD store, fixing boot errors.

Why this answer

Bootrec.exe is the command-line tool specifically designed to repair the Boot Configuration Data (BCD) and Master Boot Record (MBR). It is used from the Windows Recovery Environment command prompt. Other tools like SFC or DISM target system files or image health, not boot configuration.

18
MCQhard

A user reports that their Windows 10 PC is infected with malware that keeps reinstalling after removal. You need to boot into a minimal environment to run antivirus scans without malware interference. Which advanced startup option should you use?

A.Enable Boot Logging
B.Safe Mode
C.Last Known Good Configuration
D.Debugging Mode
AnswerB

Safe Mode loads only minimal drivers and services, preventing malware from starting, making it ideal for scanning.

Why this answer

Safe Mode loads only essential drivers and services, preventing most malware from running. This allows antivirus tools to clean infections more effectively. It is accessed via advanced startup options.

19
MCQeasy

A small business owner wants to ensure that only authorized users can log into their Windows 10 workstations. They need a tool to create and manage user accounts and set password policies. Which administrative tool should you use?

A.Computer Management
B.Local Users and Groups
C.Group Policy Editor
D.Task Scheduler
AnswerB

Local Users and Groups directly allows you to create and manage user accounts and set password policies on a local machine.

Why this answer

Local Users and Groups (lusrmgr.msc) is the snap-in for managing user accounts, groups, and local security policies on a standalone Windows system. It allows creating, modifying, and deleting users and setting password requirements.

20
MCQmedium

A user reports that their application crashes with an 'Access Denied' error when trying to write to a specific folder. You have verified the user has Full Control NTFS permissions. Which administrative tool should you use to check for any file encryption or compression that might be blocking the write?

A.Computer Management > Shared Folders to view open files.
B.Local Security Policy to check user rights assignments.
C.File Explorer > right-click folder > Properties > Advanced to view encryption and compression attributes.
D.Registry Editor to modify the folder's security descriptor.
AnswerC

Correct. The Advanced Attributes dialog shows whether the folder is encrypted or compressed, which can cause access issues.

Why this answer

The advanced security settings in the folder's Properties dialog (accessible from File Explorer) allow you to check encryption (EFS) and compression attributes. These attributes can override NTFS permissions. The other tools do not provide this information.

21
MCQmedium

A customer reports that their Windows 11 PC is displaying a 'Low Disk Space' warning on the C: drive. You need to quickly free up space by removing temporary files and system cache. Which administrative tool should you use?

A.Defragment and Optimize Drives to consolidate free space.
B.Disk Cleanup to delete temporary files and system cache.
C.Computer Management > Disk Management to shrink the volume.
D.Event Viewer to clear application logs.
AnswerB

Correct. Disk Cleanup safely removes temporary files, recycle bin contents, and other cache to free disk space.

Why this answer

Disk Cleanup (cleanmgr.exe) is the built-in tool for removing temporary files, system cache, and other unnecessary data. Storage Sense can automate this, but Disk Cleanup is the direct tool for manual cleanup. The other options do not clean temporary files.

22
MCQeasy

A customer complains that their Windows 11 laptop frequently freezes after waking from sleep. You suspect a driver issue and need to view detailed hardware and driver information to diagnose the problem. Which administrative tool should you open first?

A.Disk Management
B.System Configuration (msconfig)
C.Device Manager
D.Event Viewer
AnswerC

Device Manager lists all hardware and allows you to check driver properties, update drivers, or roll back problematic ones.

Why this answer

Device Manager provides a centralized view of all hardware devices and their drivers, including driver status and version details. This makes it the go-to tool for driver-related troubleshooting. Other tools like Disk Management or System Configuration serve different purposes.

23
MCQeasy

A user reports that their Windows 10 PC shows a 'Low Disk Space' warning on the C: drive. You need to free up space by removing temporary files, system cache, and previous Windows installations. Which tool provides a guided cleanup for these items?

A.Disk Management
B.Defragment and Optimize Drives
C.Disk Cleanup
D.Storage Spaces
AnswerC

Disk Cleanup scans for and removes temporary files, system cache, and previous Windows installations to free up disk space.

Why this answer

Disk Cleanup is the built-in tool designed to safely delete temporary files, system cache, and old Windows installations. It offers a simple interface to select categories of files to remove. Other tools like Storage Spaces or Defragment are for different disk management tasks.

24
MCQeasy

A user reports that their Windows 10 PC is running slowly and they see many background processes in Task Manager. You need to identify which processes are consuming the most CPU and memory resources without installing any additional software. Which built-in Windows tool should you use?

A.Performance Monitor
B.Resource Monitor
C.Task Manager
D.System Configuration (msconfig)
AnswerC

Task Manager lists all running processes and their CPU/memory usage, allowing you to sort and identify high-consumption processes.

Why this answer

Task Manager provides real-time monitoring of CPU, memory, disk, and network usage by process. It is the default tool for quickly identifying resource hogs on a Windows system.

25
MCQhard

A security incident has occurred: an employee's workstation was used to access unauthorized websites. The manager wants to review recent web browsing history and application usage. Which administrative tool can provide a comprehensive timeline of user activity on the Windows 10 system?

A.Performance Monitor to create a trace of user actions.
B.Task Scheduler to view past task executions.
C.Event Viewer to examine Security and Application logs for user activity.
D.Local Users and Groups to check user group memberships.
AnswerC

Correct. Event Viewer logs security events (logons) and application events, which can help reconstruct user activity.

Why this answer

Event Viewer, specifically the Windows logs (Application, Security, System), can track user logons, application starts, and other events. However, for detailed browsing history, third-party tools or browser history are needed. Among the given options, Event Viewer is the most appropriate for system-level activity.

The other tools do not track user activity in this way.

26
MCQmedium

A user is unable to install a new printer on their Windows 10 workstation because the 'Print Spooler' service is not running. You need to start the service and ensure it starts automatically on boot. Which tool should you use?

A.Device Manager
B.Services
C.Task Scheduler
D.System Configuration
AnswerB

Services provides the interface to manage all Windows services, including starting and setting startup types.

Why this answer

The Services console (services.msc) allows you to view, start, stop, and configure the startup type of Windows services. To fix the Print Spooler, you would open Services, find the Print Spooler service, start it, and set its startup type to Automatic.

27
MCQhard

A technician needs to deploy a custom security policy to all Windows 10 workstations in a small office. The policy must restrict access to the Control Panel and prevent users from changing system settings. Which administrative tool should be used to create and apply this policy locally on each machine?

A.Local Security Policy (secpol.msc)
B.User Accounts (netplwiz)
C.Local Group Policy Editor (gpedit.msc)
D.System Configuration (msconfig)
AnswerC

Local Group Policy Editor provides Administrative Templates that include settings to hide or restrict access to Control Panel and system settings.

Why this answer

The Local Group Policy Editor (gpedit.msc) allows administrators to configure detailed security and restriction policies for users and computers. It is available on Windows Pro/Enterprise editions and is the correct tool for applying such restrictions locally. Other tools like Local Security Policy or User Accounts have limited scope.

28
MCQhard

A server administrator needs to grant a junior technician the ability to reset user passwords on a Windows Server 2019 domain controller, but without giving them full administrative rights. Which administrative tool should be used to delegate this specific permission?

A.Local Security Policy to assign the 'Reset passwords' user right.
B.Active Directory Users and Computers and use the Delegation of Control Wizard.
C.Group Policy Management Console to create a policy that allows password resets.
D.Computer Management to add the technician to the 'Account Operators' group.
AnswerB

Correct. ADUC's Delegation of Control Wizard allows granting specific permissions like password reset on selected OUs or users.

Why this answer

Active Directory Users and Computers (ADUC) allows delegating control, including password reset permissions, through the Delegation of Control Wizard. This is a standard method for granular permission assignment in Active Directory. The other tools do not offer this delegation capability.

29
MCQeasy

A user reports that after a recent Windows update, the 'Local Users and Groups' snap-in is missing from the Computer Management console. The user needs to add a new local user account. Which administrative tool should be used to complete this task?

A.Run lusrmgr.msc from the Run dialog.
B.Open the Services console (services.msc) and restart the 'User Manager' service.
C.Use the Disk Management tool to create a new user volume.
D.Open the Registry Editor and modify the SAM registry hive.
AnswerA

Correct. lusrmgr.msc launches the Local Users and Groups snap-in directly, allowing user account creation.

Why this answer

The 'Local Users and Groups' snap-in (lusrmgr.msc) is the correct tool for managing local user accounts and groups. Even if it's missing from Computer Management, it can be run directly or added via the MMC. The other options are not designed for user account management.

30
MCQeasy

A customer complains that their Windows 10 PC fails to boot and displays a 'Bootmgr is missing' error. You suspect the Boot Configuration Data (BCD) is corrupted. Which tool should you use to repair the BCD from the Windows Recovery Environment?

A.chkdsk /f
B.sfc /scannow
C.bootrec /rebuildbcd
D.diskpart
AnswerC

bootrec /rebuildbcd scans all disks for Windows installations and adds them to the BCD store, fixing corruption.

Why this answer

The bootrec tool is specifically designed to repair BCD and boot sector issues. Running bootrec /rebuildbcd scans for Windows installations and rebuilds the BCD store.

Ready to test yourself?

Try a timed practice session using only Windows Administrative Tools questions.