CCNA Operating Systems Questions

MCQmedium

A user reports that a Ubuntu Linux workstation boots to a command-line prompt instead of the graphical desktop after a recent package update. The technician wants to check which systemd target is currently active and switch to the graphical environment without rebooting. Which sequence of commands should the technician use?

A.systemctl list-units --type=target, then systemctl isolate graphical.target

B.systemctl get-default, then systemctl set-default graphical.target

C.systemctl isolate multi-user.target, then reboot

D.systemctl status graphical.target, then systemctl restart gdm

AnswerA

Listing target units shows which targets are active, revealing whether the system is in multi-user.target rather than graphical.target. Isolating graphical.target then starts the display manager and desktop environment immediately in the running session, restoring the GUI without a reboot. The technician can subsequently set the default target if the change should persist.

Why this answer

Listing active targets identifies the current systemd state, and isolating graphical.target transitions the running system into the graphical environment right away. This satisfies the requirement to switch without rebooting, and the default target can be corrected separately if the change needs to survive a restart.

Exam trap

The trap here is confusing the persistent default target with the currently active target, where only isolate changes the running state immediately.

Practice this question →

Multi-Selecthard

A technician is troubleshooting a Windows 10 workstation that frequently becomes unresponsive. The user reports that the system slows down dramatically after a few hours of use, and the technician suspects a memory leak or resource exhaustion. The technician opens Task Manager and switches to the Performance tab. Which two counters should the technician monitor to confirm the suspicion? (Choose two.)

Select 2 answers

A.Memory usage percentage

B.Available memory

C.Disk queue length

D.CPU utilization

E.GPU usage

AnswersA, B

The Memory usage percentage shows how much of the physical RAM is currently in use. A steady increase over time without a corresponding drop indicates a memory leak or resource exhaustion. Monitoring this counter helps confirm whether the system is running out of available memory, which aligns with the reported slowdown after hours of use. It is a key indicator of memory pressure.

Why this answer

Memory usage percentage and available memory are the two counters that directly reflect physical memory consumption and availability. A memory leak causes memory usage to climb and available memory to shrink over time, matching the reported slowdown. CPU utilization, disk queue length, and GPU usage can be affected indirectly but do not confirm memory exhaustion as directly as the memory-specific counters.

Exam trap

The trap here is selecting counters that show symptoms of memory pressure, such as disk queue length, instead of the counters that directly measure memory consumption and availability.

Practice this question →

Multi-Selectmedium

A technician is troubleshooting a Windows 10 workstation that fails to boot. The technician suspects a problem with the boot configuration data (BCD). Which two commands can be used to rebuild the BCD? (Choose two.)

Select 2 answers

A.bootrec /fixboot

B.bootrec /fixmbr

C.bootrec /rebuildbcd

D.bcdedit /export

E.bcdboot C:\Windows

AnswersC, E

bootrec /rebuildbcd scans the disk for Windows installations and allows you to select which ones to add to the BCD store. It is a standard command in the Windows Recovery Environment to repair boot issues. This command directly addresses rebuilding the BCD, making it a correct choice.

Why this answer

The two commands that rebuild the BCD are bootrec /rebuildbcd and bcdboot. bootrec /rebuildbcd scans for Windows installations and rebuilds the BCD store, while bcdboot creates or repairs the BCD and boot files from a specified Windows directory. The other commands either back up, fix the boot sector, or fix the MBR, but do not rebuild the BCD.

Exam trap

The trap here is confusing bootrec /fixboot or /fixmbr with BCD repair, when they address different boot components.

Practice this question →

MCQmedium

A technician needs to install a 64-bit application on a Windows 11 system. The application requires .NET Framework 3.5. When the technician tries to enable .NET Framework 3.5 through Windows Features, the installation fails with error 0x800F0906. What is the most likely cause?

A.The user does not have administrative privileges.

B.The .NET Framework 3.5 feature is corrupted in the Windows component store.

C.The application is not compatible with Windows 11.

D.The system does not have an internet connection to download the required files.

AnswerD

Error 0x800F0906 typically indicates that Windows cannot download the required files to enable .NET Framework 3.5. By default, Windows tries to download the feature from Windows Update. If there is no internet connection or Windows Update is blocked, the installation fails. The solution is to provide the installation media or enable the feature using DISM with a source path. Thus, lack of internet is the most likely cause.

Why this answer

Error 0x800F0906 occurs when Windows cannot download the necessary files to enable .NET Framework 3.5. This is typically due to no internet connection or Windows Update being unavailable. The correct resolution is to use DISM with a source path pointing to the Windows installation media, or to enable the feature while connected to the internet.

The other options do not match the error code.

Exam trap

The trap here is assuming the error is due to corruption or permissions, when it actually indicates a missing source for the feature files.

Practice this question →

MCQhard

An administrator needs to deploy a standardized Windows 11 image to 40 new workstations and must remove the built-in consumer applications while preserving the Start layout and driver set. Which deployment approach best meets these requirements with the least manual effort per machine?

A.Install Windows manually on each PC, then run a PowerShell script to remove applications

B.Perform an in-place upgrade on each workstation using a mounted ISO

C.Use Windows Backup to restore a reference workstation's files to each new PC

D.Create a Windows system image with DISM and deploy it with an unattend.xml answer file

AnswerD

Capturing a generalized image with DISM and applying it through an answer file lets the administrator strip unwanted built-in applications, inject drivers, and apply a standard Start layout in one automated pass. The unattend.xml handles computer naming, domain join, and locale settings, so each of the 40 workstations receives an identical configuration without manual per-machine steps.

Why this answer

A DISM-captured image applied with an unattend.xml answer file delivers a consistent, automated deployment. The administrator can remove built-in applications during image preparation, inject drivers, and define the Start layout once, then apply the same image to all 40 workstations with minimal per-machine interaction.

Exam trap

The trap here is treating a file backup or a post-install cleanup script as a deployment method, when true standardization requires a captured operating system image with an answer file.

Practice this question →

MCQmedium

A user reports that their Windows 11 laptop takes several minutes to reach the desktop after signing in, and the desktop icons and taskbar appear one by one. No error messages are displayed. You open Task Manager and see that disk usage is at 100% for several minutes after logon. Which Windows tool should you use first to identify the specific startup program causing the delay?

A.System Configuration (msconfig) > Services tab

B.Task Manager > Startup tab

C.Event Viewer > Windows Logs > Application

D.Performance Monitor with a Data Collector Set

AnswerB

The Startup tab in Task Manager lists all programs configured to launch at user logon and shows an impact rating for each. Disabling or investigating high-impact entries directly addresses the slow post-logon behavior. It is the quickest built-in tool to identify which startup app is saturating disk I/O during sign-in.

Why this answer

Task Manager's Startup tab is the built-in tool that specifically lists programs set to run at logon and provides an impact rating based on resource usage. Since the symptom is slow logon with high disk usage, checking this tab lets you quickly identify and disable the offending startup app. Other tools are either too broad or focus on the wrong object.

Exam trap

The trap here is assuming that Event Viewer will pinpoint the slow startup app because it logs system events, when in fact it does not enumerate startup programs or their performance impact.

Practice this question →

Multi-Selectmedium

A technician is troubleshooting a Windows 11 desktop that randomly freezes and displays a blue screen with the stop code DRIVER_IRQL_NOT_LESS_OR_EQUAL. The technician suspects a recently updated device driver. Which two tools or artifacts should the technician examine to identify the offending driver? (Choose two.)

Select 2 answers

A.The memory dump file analyzed with WinDbg

B.Driver Verifier

C.Reliability Monitor

D.Event Viewer's System log

E.Performance Monitor's counter logs

AnswersA, B

A kernel memory dump records the state of the system at the crash, and WinDbg's !analyze -v command parses the bug check to name the faulting module, often the exact driver file. For DRIVER_IRQL_NOT_LESS_OR_EQUAL, the analysis typically points to the driver that accessed invalid memory, making this the most direct identification method.

Why this answer

The memory dump analyzed with WinDbg names the faulting module directly, and Driver Verifier forces the misbehaving driver to crash deterministically so it can be identified. Together they move the investigation from a general bug check to a specific driver file that can be updated, rolled back, or removed.

Exam trap

The trap here is relying on logs that report that a crash happened rather than logs and tools that name the driver responsible for the crash.

Practice this question →

MCQmedium

A technician is configuring a Windows 11 workstation that will be shared by multiple users in a lab. The requirement is that each user's documents and settings remain separate, and that the disk space used by each user's profile is limited to 500 MB. Which Windows feature should the technician use to enforce the storage limit?

A.Storage Spaces

B.Folder Redirection

C.Disk Quotas

D.User Account Control

AnswerC

Disk Quotas in Windows allow an administrator to set a limit on the amount of disk space each user can consume on a volume. By enabling quotas on the volume that hosts user profiles and setting a 500 MB limit per user, the technician enforces the requirement. This feature tracks usage per user and can deny writes when the limit is exceeded, directly meeting the lab's storage restriction.

Why this answer

Disk Quotas are the Windows feature designed to limit the amount of disk space individual users can consume on a volume. By enabling quotas on the volume storing user profiles and setting a 500 MB limit per user, the technician ensures each user's profile cannot exceed the specified size. Other options address data redirection, storage pooling, or privilege elevation, none of which enforce per-user storage limits.

Exam trap

The trap here is confusing data management features like Folder Redirection with actual storage enforcement, when only Disk Quotas track and limit per-user disk consumption.

Practice this question →

MCQeasy

A help desk technician receives a Windows 11 laptop that displays a message that the operating system cannot be found at startup. The drive is detected in firmware, and the technician wants to rebuild the boot configuration without reinstalling Windows. Which command should be run from the Windows Recovery Environment?

A.chkdsk C: /f /r

B.sfc /scannow

C.bootrec /fixmbr

D.bootrec /rebuildbcd

AnswerD

bootrec /rebuildbcd scans all disks for Windows installations and rebuilds the Boot Configuration Data store, re-creating the missing boot entry that produces the operating system not found error. Running it from the Windows Recovery Environment restores the ability to boot without reinstalling, and it works with both BIOS/MBR and UEFI/GPT configurations.

Why this answer

The missing operating system message on a detected drive usually means the Boot Configuration Data store lacks a valid entry. Rebuilding it with bootrec /rebuildbcd from the recovery environment re-creates the Windows Boot Manager entry and restores startup without a full reinstall.

Exam trap

The trap here is reaching for fixmbr on a UEFI system, where the master boot record is not the component that launches Windows.

Practice this question →

MCQmedium

A technician is upgrading a Windows 11 Pro workstation from a SATA SSD to a larger NVMe drive. The user needs to retain installed applications, user profiles, and the existing domain join. Which tool should the technician use to move the installation to the new drive without reinstalling Windows?

A.Disk Management's Extend Volume on the new disk after cloning

B.Windows System Image Backup (wbadmin) restore to the new disk

C.Third-party drive cloning software, such as Macrium Reflect or Clonezilla

D.Windows Recovery Environment's Reset this PC with Keep my files

AnswerC

Cloning software copies the entire partition structure and boot files from the SATA SSD to the NVMe drive, preserving Windows, installed applications, user profiles, and the domain join. After cloning, the technician can extend the system partition into remaining space. This is the standard method for a like-for-like drive upgrade when reinstalling is not acceptable.

Why this answer

Cloning is the correct migration path because it duplicates the source disk's partitions and boot configuration onto the new NVMe drive, so the installed applications, profiles, and domain membership continue to work. Image-based restore and reset operations either rebuild the layout or strip applications, and Extend Volume cannot populate a blank disk.

Exam trap

The trap here is assuming that any backup or image tool performs a same-hardware drive upgrade, when cloning is the only method that preserves the installation and boot files on a new disk.

Practice this question →

MCQeasy

A user calls the help desk because their Windows 11 laptop will not boot. The screen displays the message "Bootmgr is missing" immediately after the manufacturer logo. The technician needs to repair the boot configuration data so the system can start normally. Which command should the technician run from the Windows Recovery Environment?

A.bootrec /rebuildbcd

B.bootrec /fixmbr

C.chkdsk /f

D.sfc /scannow

AnswerA

The /rebuildbcd switch scans all disks for Windows installations and lets the technician add missing entries to the Boot Configuration Data store. Because the error indicates that the boot manager cannot locate a valid BCD entry, rebuilding the BCD is the appropriate repair. This command directly addresses the missing or corrupted boot configuration that prevents Windows 11 from starting.

Why this answer

The "Bootmgr is missing" error means the boot manager cannot find a valid Boot Configuration Data entry for the Windows installation. The bootrec /rebuildbcd command scans for Windows installations and rebuilds the BCD store, directly resolving this issue. Other recovery commands address different problems such as MBR corruption, system file damage, or disk errors, and would not restore the missing boot entry.

Exam trap

The trap here is assuming that any bootrec switch will fix any boot error, when each switch targets a specific boot component and only /rebuildbcd rebuilds the BCD store.

Practice this question →

MCQeasy

A user reports that their Windows 11 laptop display appears very dim even at the highest brightness setting. The technician suspects that the display adapter driver may be causing the issue. Which tool should the technician use to verify the driver version and check for driver errors?

A.Task Manager

B.Device Manager

C.Disk Management

D.System Configuration

AnswerB

Device Manager lists all hardware devices and their drivers, allowing the technician to view driver versions, update drivers, and check for error codes. By expanding Display adapters, the technician can see the current driver and any warning icons that indicate problems. This directly addresses the need to verify the driver version and identify driver-related errors causing the dim display.

Why this answer

Device Manager is the Windows tool that provides a centralized view of hardware devices and their drivers. It allows the technician to check the display adapter's driver version, update it, and see error codes that might explain the dim display. Task Manager, Disk Management, and System Configuration serve different purposes and do not offer driver-level diagnostics for hardware devices.

Exam trap

The trap here is assuming that any system utility can inspect drivers, when only Device Manager provides detailed driver version and error information for hardware devices.

Practice this question →