Courseiva
← 220-1202
Full test
hardMultiple ChoiceObjective-mapped

220-1102 Practice Question: A user's Windows 11 PC displays a 'Critical…

A user's Windows 11 PC displays a 'Critical Process Died' blue screen error after a recent Windows Update. The system boots into a recovery loop. Which advanced startup option should be used to remove the problematic update?

⚠ Common exam trap

Many candidates choose System Restore (Option B) because it sounds like a general 'undo' tool, but they fail to recognize that uninstalling the specific update is faster, more targeted, and does not require a pre-existing restore point, which may not exist after a forced update.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

Boot into Safe Mode from the recovery environment and uninstall the latest update.

Booting into Safe Mode from the Windows Recovery Environment (WinRE) allows you to access the desktop with minimal drivers and services, then use Settings > Windows Update > Update History > Uninstall updates to remove the problematic cumulative update. This directly addresses the 'Critical Process Died' bugcheck (0x000000EF), which often results from a corrupted system file or driver conflict introduced by a recent update, and Safe Mode bypasses the crash loop to enable the uninstall.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • ✓

    Boot into Safe Mode from the recovery environment and uninstall the latest update.

    Why this is correct

    This is the most direct and least disruptive solution when a critical process crash occurs immediately after an update, strongly indicating an incompatibility or corruption introduced by the patch. Safe Mode, accessed via the Windows Recovery Environment (WinRE), loads only essential system drivers and services, bypassing the problematic components. This allows the technician to boot the system stably and then use the "Uninstall Updates" feature in Windows Settings or Control Panel to remove the offending patch, resolving the critical process error without data loss.

  • ✗

    Use System Restore to revert to a point before the update.

    Why it's wrong here

    While System Restore can revert system files and registry settings to a previous state, it relies on the existence of a suitable restore point created before the problematic update. If System Restore was disabled or no recent restore points were created, this option would be unavailable. Furthermore, System Restore might not fully remove all components of a problematic update, or it could introduce other unforeseen issues by reverting unrelated system changes, making direct uninstallation a more targeted and reliable approach for update-related problems.

  • ✗

    Run the Windows Memory Diagnostic tool to check for RAM issues.

    Why it's wrong here

    The Windows Memory Diagnostic tool is designed to identify physical defects or corruption in Random Access Memory (RAM), which can indeed lead to critical system crashes and blue screens of death. However, the critical process error occurring immediately after a Windows update strongly suggests a software-related conflict or corruption introduced by the update itself, rather than a sudden hardware failure. While memory issues can cause crashes, diagnosing RAM should be pursued only after ruling out the more probable cause directly linked to the recent system change.

  • ✗

    Perform a clean installation of Windows 11 using the recovery USB.

    Why it's wrong here

    Performing a clean installation of Windows 11, even with a recovery USB, is a drastic measure that completely erases all user data, applications, and system configurations on the primary drive. This action should only be considered as a last resort when all other troubleshooting steps, such as uninstalling problematic updates or using system recovery options, have failed. Given that the issue directly follows an update, a targeted solution like removing the update is far more appropriate and preserves the user's existing environment and data.

About these practice questions

Courseiva writes every 220-1202 question from scratch — 495 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This 220-1202 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 220-1202 exam.