hardMultiple ChoiceObjective-mapped
220-1201 Practice Question: That a VM running Linux suddenly displays a…
A user reports that a VM running Linux suddenly displays a 'Kernel Panic' error after the technician applied a snapshot and then reverted to it. The snapshot was taken while the VM was running. What is the most likely cause of the kernel panic?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The snapshot captured the VM in a state where the file system was inconsistent (e.g., during a write operation).
Taking a snapshot of a running VM captures the state of the virtual disk and memory, but if the file system is in an inconsistent state (e.g., during a write operation), reverting to that snapshot can cause corruption. The correct answer identifies that the snapshot was taken at an inopportune time, leading to file system inconsistency.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
The snapshot file became corrupted due to insufficient disk space.
Why it's wrong here
If the snapshot file itself, or associated delta disk files, became corrupted due to insufficient disk space during its creation or subsequent operations, the revert operation would most likely fail outright with an error message. It is less probable for a corrupted snapshot to successfully revert to a state that then causes a kernel panic upon boot. A kernel panic implies the system started booting but encountered a critical internal OS error, not a failure to load the snapshot data.
- ✗
The VM’s virtual disk was configured as thin provisioned and ran out of space.
Why it's wrong here
While a thin-provisioned virtual disk running out of space on the underlying datastore would certainly cause I/O errors within the VM, leading to application failures or even a frozen OS, it is unlikely to directly cause a kernel panic specifically after a snapshot revert. The revert operation itself does not inherently change the amount of consumed datastore space in a way that would trigger a new 'out of space' condition immediately post-revert. A kernel panic typically points to a deeper OS-level inconsistency rather than a simple lack of disk space, which would manifest as I/O errors.
- ✓
The snapshot captured the VM in a state where the file system was inconsistent (e.g., during a write operation).
Why this is correct
Taking a snapshot of a running VM without quiescing the file system can capture the disk state at an arbitrary point, potentially in the middle of a write operation or an incomplete transaction. If this snapshot is reverted, the file system metadata might not accurately reflect the actual data blocks, leading to an inconsistent state. When the Linux kernel attempts to mount or access this inconsistent file system during boot, it can encounter critical errors that trigger a kernel panic, as it cannot reconcile the file system's integrity.
- ✗
The hypervisor’s time synchronization caused a clock skew.
Why it's wrong here
Clock skew, resulting from hypervisor time synchronization issues (e.g., NTP problems or VMware Tools time sync misconfiguration), can indeed lead to various problems within a VM, such as authentication failures, incorrect timestamps in logs, or issues with time-sensitive applications. However, a clock skew is a relatively minor system issue that does not directly corrupt the operating system's core functionality or file system integrity. Therefore, it is highly improbable to cause a severe system crash like a kernel panic upon booting after a snapshot revert.
Go deeper
Related to this question
Learn chapter
RAM Types and Memory Slots
Key term
Snapshot
A snapshot is a point-in-time copy of a system's data or state, used for backup, recovery, or testing without disrupting the original.
Key term
New Technology File System
New Technology File System (NTFS) is a modern file system developed by Microsoft that controls how data is stored, organized, and accessed on Windows-based hard drives and other storage devices.
About these practice questions
Courseiva writes every 220-1201 question from scratch — 972 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 220-1201 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 220-1201 exam.